Project

General

Profile

Actions

Bug #83643

closed

Support PHP OpenSSL with LibreSSL

Added by Jan Kiesewetter about 6 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Authentication
Target version:
-
Start date:
2018-01-23
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The official PHP 7.2 alpine docker image uses LibreSSL instead of OpenSSL

https://github.com/docker-library/php/blob/57b41cfc2d1e07acab2e60d59a0cb19d83056fc1/7.2/alpine3.7/fpm/Dockerfile#L26
https://github.com/docker-library/php/blob/57b41cfc2d1e07acab2e60d59a0cb19d83056fc1/7.2/alpine3.7/fpm/Dockerfile#L98

PHP Info:

openssl
OpenSSL support enabled
OpenSSL Library Version LibreSSL 2.5.5
OpenSSL Header Version LibreSSL 2.5.5
Openssl default config /etc/ssl/openssl.cnf
Directive Local Value Master Value
openssl.cafile no value no value
openssl.capath no value no value

I'm not able to log in to the backend.


Files

OpenSSL.png (13.4 KB) OpenSSL.png Jan Kiesewetter, 2018-01-23 00:36

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Feature #79909: Allow crypto via libsodium as alternative to opensslRejected2017-02-19

Actions
Actions #1

Updated by Susanne Moog about 6 years ago

  • Category set to Authentication
Actions #2

Updated by Jan Kiesewetter about 6 years ago

The cooperation with the libressl binary seems to be the problem, not the php extension.

libressl installs a binary also called openssl.

I workaround this atm by removing the .persistent-deps and install them again with openssl.

https://github.com/t3easy/docker-php/blob/master/7.2/Dockerfile#L3-L10

Actions #3

Updated by Riccardo De Contardi about 6 years ago

  • Related to Feature #79909: Allow crypto via libsodium as alternative to openssl added
Actions #4

Updated by Jan Kiesewetter about 6 years ago

Seems like the default config of openssl and libressl are different.
Copy over the openssl.cnf from openssl seems to work. I'll check some more...

Actions #5

Updated by Jan Kiesewetter about 6 years ago

OK, problem is the openssl.cnf from libressl has not set:

default_bits        = 2048
default_md        = sha256

What about to return openssl_error_string there: https://github.com/TYPO3/TYPO3.CMS/blob/05e4d107bac8ea6bbdb550c667d2480347feb2ba/typo3/sysext/install/Classes/SystemEnvironment/Check.php#L532
http://php.net/openssl_error_string

Actions #6

Updated by Jan Kiesewetter about 6 years ago

I've opened a bug in the php image
https://github.com/docker-library/php/issues/569

Actions #7

Updated by Jan Kiesewetter about 6 years ago

Maybe TYPO3 should not depend on the default_ openssl settings but add them to FactoryConfiguration?

Actions #8

Updated by Gerrit Code Review over 4 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62918

Actions #9

Updated by Benni Mack over 4 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #10

Updated by Gerrit Code Review over 4 years ago

  • Status changed from Resolved to Under Review

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62945

Actions #11

Updated by Gerrit Code Review over 4 years ago

Patch set 2 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62945

Actions #12

Updated by Benni Mack over 4 years ago

  • Status changed from Under Review to Resolved
Actions #13

Updated by Benni Mack about 4 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF