Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:69257
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.83.49 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAF+90c9rnZw=Du1-ns_hhAFh1Ec3Jn0ESCPEmXpccerdTuog4w@mail.gmail.com>
References: <CAH8MpnnTGD0xAwG1j9sh10EC6XzdscVRLbJzEMG6qWSBK5c17w@mail.gmail.com>
	<523A466C.4070903@gmail.com>
	<CAHMUw2HxcWgOBxiK=r4y6FgWF_Gkhgc6BgHxF_bgLLJG9RVxmQ@mail.gmail.com>
	<CAEZPtU7YjNksHLEyH9VzM-iDdpQmBeJkF-BHPkAajZjiQS5XBA@mail.gmail.com>
	<CAHMUw2Gv=JdswmWVHCvp2S3WECVPEx4aWOQzF2yLMHaqJ5HK-g@mail.gmail.com>
	<000001ceb53c$492a3090$db7e91b0$@org>
	<CAHMUw2ECV2KnwgtoKEwqB5b6Y4M_SM0NKCZK3eMVWoDp2Gemdw@mail.gmail.com>
	<CAH8Mpnm56NxSoKfK3=7Lbeqq1x3MjxahRC2_aYvR-H3=R6YJkQ@mail.gmail.com>
	<CAF+90c9rnZw=Du1-ns_hhAFh1Ec3Jn0ESCPEmXpccerdTuog4w@mail.gmail.com>
Date: Sat, 21 Sep 2013 16:32:17 -0400
Message-ID: <CAH8Mpn=dBhc44gTNR1Ra8oLM9JQdFqU+-eOc-VUeHJdcn5HvHQ@mail.gmail.com>
To: Nikita Popov <nikita.ppv@gmail.com>
Cc: Tjerk Anne Meesters <datibbaw@php.net>, "Bryan C. Geraghty" <bryan@ravensight.org>, 
	Pierre Joye <pierre.php@gmail.com>, 
	"johannes@schlueters.dot.de" <johannes@schlueters.dot.de>, 
	"addw@phcomp.dot.co.uk" <addw@phcomp.dot.co.uk>, PHP Internals <internals@lists.php.net>, 
	=?ISO-8859-1?Q?=C1ngel_Gonz=E1lez?= <keisial@gmail.com>
Content-Type: multipart/alternative; boundary=001a11c32c08e6b7f904e6eaaeb6
Subject: Re: Re: PHP Crypt functions - security audit
From: rdlowrey@gmail.com (Daniel Lowrey)

--001a11c32c08e6b7f904e6eaaeb6
Content-Type: text/plain; charset=ISO-8859-1

Honestly that didn't even occur to me. I'd *much* rather kill the
additional functions like you suggest. As long as I am not forced to use a
PHP.ini to run I'm happy. ini_set() works fine for this and unless someone
has a compelling reason not to I'll nix the functions.

On Saturday, September 21, 2013, Nikita Popov wrote:

>
> On Sat, Sep 21, 2013 at 10:18 PM, Daniel Lowrey <rdlowrey@gmail.com<javascript:_e({}, 'cvml', 'rdlowrey@gmail.com');>
> > wrote:
>
>> Hello security-conscious internals people!
>>
>> I've got (what believe to be) a pretty good working solution for the
>> problem of insecure-by-default stream encryption. I need to do some more
>> thorough testing before pushing it upstream to a public fork but here's
>> the
>> quick and dirty:
>>
>
> Sounds really great! One minor nitpick:
>
> - Global CA path defaults may be specified via new "openssl.cafile" and
>> "openssl.capath" php.ini directives. This has the advantage mentioned
>> upthread of allowing distros to customize the .ini file to point to an
>> existing CA file.
>>
>> - Global CA path defaults may be specified at runtime via two new
>> functions:
>>     + bool openssl_set_default_cafile(string $cafile)
>>     + bool openssl_set_default_capath(string $capath)
>>
>
> Why do we need these functions? Can't you just specify it with
> ini_set('openssl.cafile', $file)? I don't immediately see why we need
> additional functions to set those ini options.
>
> Nikita
>
>

--001a11c32c08e6b7f904e6eaaeb6--