Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:48069 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 24227 invoked from network); 23 Apr 2010 14:53:20 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 23 Apr 2010 14:53:20 -0000 Authentication-Results: pb1.pair.com header.from=php@hristov.com; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=php@hristov.com; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain hristov.com from 85.92.87.36 cause and error) X-PHP-List-Original-Sender: php@hristov.com X-Host-Fingerprint: 85.92.87.36 iko.gotobg.net Linux 2.6 Received: from [85.92.87.36] ([85.92.87.36:35563] helo=iko.gotobg.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 5A/2D-57655-E54B1DB4 for ; Fri, 23 Apr 2010 10:53:19 -0400 Received: from f051069236.adsl.alicedsl.de ([78.51.69.236] helo=[192.168.1.127]) by iko.gotobg.net with esmtpa (Exim 4.69) (envelope-from ) id 1O5KFc-0006k7-Kz; Fri, 23 Apr 2010 17:53:04 +0300 Message-ID: <4BD1B459.3040007@hristov.com> Date: Fri, 23 Apr 2010 16:53:13 +0200 User-Agent: Thunderbird 2.0.0.24 (X11/20100317) MIME-Version: 1.0 To: pierre@php.net CC: PHP Internals List Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - iko.gotobg.net X-AntiAbuse: Original Domain - lists.php.net X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - hristov.com X-Source: X-Source-Args: X-Source-Dir: Subject: Bug #51647 Certificate file without private key (pk in another file) doesn't work From: php@hristov.com (Andrey Hristov) Pierre, if you don't like the patch I have committed to openssl to fix the problem you can revert it, but only if you can provide a better one. The test case is ext/mysqli/tests/bug51647.phpt You need to start the MySQL server with the following options : ssl-ca=/path/to/cacert.pem ssl-cert=/path/to/server-cert.pem ssl-key=/path/to/server-key.pem All files you can find here: http://www.hristov.com/andrey/projects/php_stuff/certs/ The client certificates are already in the SVN repository. Andrey