# [PATCH] OpenSSL CRL Support

- Thread: https://externals.io/message/27306
- Original archive: https://news-web.php.net/php.internals/27306
- Started by Moritz Bechler on 2007-01-06T20:08:09+00:00
- Messages: 4
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #27306 — Moritz Bechler — 2007-01-06T20:08:09+00:00

URL: https://externals.io/message/27306#27306

Hi,

I already asked for comments on inclusion of OpenSSL CRL support in 
ext/openssl some time ago (I had a independend extension at this point).
As I continued working on it I realized that making this an independend 
extension makes me to reinvent/reimplement the wheel and makes it 
impossible to have ext/openssl and the CRL support to integrate nicely, 
so I wrote a patch to include it in ext/openssl.

In fact, having Marc Delling's PKCS#12 patch and mine applied makes it 
possible to write basic but real PKI-CA applications in PHP, so I think 
it would be nice to have this.

I know that there are not that many people who need this but I think 
this is true for nearly the whole openssl extension except for the 
stream wrapper. (maybe we should consider splitting it up?)

You find a patch (hopefully I got your conding standards right ;)) 
attached, but I should take careful review because this actually is my 
first work on PHP extensions and I'm also not used to writing C code.
I can/will provide a test (what kind of tests should I supply?) and 
documentation when needed.


Moritz Bechler

---

## #27307 — Pierre — 2007-01-06T20:43:42+00:00

URL: https://externals.io/message/27306#27307 · In reply to: #27306

Hello Moritz,


> Hi,
>
> I already asked for comments on inclusion of OpenSSL CRL support in
> ext/openssl some time ago (I had a independend extension at this point).

Do you have a bug id please? If not please open one.

> As I continued working on it I realized that making this an independend
> extension makes me to reinvent/reimplement the wheel and makes it
> impossible to have ext/openssl and the CRL support to integrate nicely,
> so I wrote a patch to include it in ext/openssl.
>
> In fact, having Marc Delling's PKCS#12 patch and mine applied makes it
> possible to write basic but real PKI-CA applications in PHP, so I think
> it would be nice to have this.

This patch is in the queue. There is a bug report about it. I will add
the pending patches to the next development branch for 5.x and HEAD
once 5.2.1 is out.

> I know that there are not that many people who need this but I think
> this is true for nearly the whole openssl extension except for the
> stream wrapper. (maybe we should consider splitting it up?)

Even if not many people needs openssl functions, the needs are here
and it is a pain when a feature is missing.

> You find a patch (hopefully I got your conding standards right ;))
> attached, but I should take careful review because this actually is my
> first work on PHP extensions and I'm also not used to writing C code.
> I can/will provide a test (what kind of tests should I supply?) and
> documentation when needed.

Thanks for patch!

Can you put it in a bug report so it will not get lost? And you will
be informed as soon as it is committed.

Regards,
--Pierre

---

## #27308 — Moritz Bechler — 2007-01-06T21:00:56+00:00

URL: https://externals.io/message/27306#27308 · In reply to: #27307

Hi Pierre,
> Hello Moritz,
>
> 
> > […]
>
> Do you have a bug id please? If not please open one.

Open a feature request #40046. Hope that is sufficient.


Moritz Bechler

---

## #27313 — Pierre — 2007-01-06T22:01:49+00:00

URL: https://externals.io/message/27306#27313 · In reply to: #27308

> Hi Pierre,
> > […]
>
> Open a feature request #40046. Hope that is sufficient.

It is, I added a link to your patch (the most important part of this thread ;)

--Pierre