Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:49086
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.161.42 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=YHwQtpvZTKZnbDgp0Qag6ocWw4O9anqiID5yzm578E5VNBbFakFSr9rDtEuTDe+WBi
         BKF/aDhIyI0AwGdOGaKVHoEdkk/ZU/YbQEcBQRi+j+nl/H3B2PSJed1F+oy6AZBldZb3
         68pqS14F7wInlma1NRomdbJOB+J8flVRNxQhg=
MIME-Version: 1.0
In-Reply-To: <4C400E13.1000704@quis.cx>
References: <E4.B0.22197.4C1DE3C4@pb1.pair.com>
	<4C400E13.1000704@quis.cx>
Date: Fri, 16 Jul 2010 09:54:24 +0200
Message-ID: <AANLkTilURiHeIOa4Mka4UnqOJSy9KbgFoOQgEVsie9MI@mail.gmail.com>
To: Jille Timmermans <jille@quis.cx>
Cc: internals@lists.php.net, 
	Paul van Brouwershaven <paul@vanbrouwershaven.com>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] In memory support for openssl_pkcs7_*
From: pierre.php@gmail.com (Pierre Joye)

hi,

On Fri, Jul 16, 2010 at 9:45 AM, Jille Timmermans <jille@quis.cx> wrote:
> For the record: I created a proof-of-concept patch which changes
> openssl_pkcs7_sign() to use the input filename as a string instead as a
> filename. Paul has tested this and it seems to work.
>
> I don't know what the best way is to go from here. We could add an extra
> argument to all those functions which toggles whether they are threated as
> filenames or not. Or we could let all the functies also accept streams,
> etc..
> Is there a maintainer of the OpenSSL (pcks7) functions?
>
> -- Jille
>
> Op 15-7-2010 11:15, Paul van Brouwershaven schreef:
>>
>> Hi,
>>
>> The PHP functions openssl_pkcs7_(sign|encrypt|decrypt|verify) do require
>> files to be executed. In
>> many cases this will create the unintended requirement of temporary files.
>> In compare with
>> openssl_(sign|encrypt|decrypt|verify|...) which are doing almost the same
>> thing this is a strange
>> behavior.
>>
>> When we look at the purpose of openssl_pkcs7_* (working with digital
>> signatures in mail), you would
>> not expect to work with files instead of strings for this few data.

Can you open a feature request for these changes/features please? So I
won't lost track of them.

Thanks for your workd and feedbacks,


Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org