Bug #83643
closedSupport PHP OpenSSL with LibreSSL
100%
Description
The official PHP 7.2 alpine docker image uses LibreSSL instead of OpenSSL
https://github.com/docker-library/php/blob/57b41cfc2d1e07acab2e60d59a0cb19d83056fc1/7.2/alpine3.7/fpm/Dockerfile#L26
https://github.com/docker-library/php/blob/57b41cfc2d1e07acab2e60d59a0cb19d83056fc1/7.2/alpine3.7/fpm/Dockerfile#L98
PHP Info:
openssl
OpenSSL support enabled
OpenSSL Library Version LibreSSL 2.5.5
OpenSSL Header Version LibreSSL 2.5.5
Openssl default config /etc/ssl/openssl.cnf
Directive Local Value Master Value
openssl.cafile no value no value
openssl.capath no value no value
I'm not able to log in to the backend.
Files
Updated by Jan Kiesewetter almost 7 years ago
The cooperation with the libressl binary seems to be the problem, not the php extension.
libressl installs a binary also called openssl.
I workaround this atm by removing the .persistent-deps and install them again with openssl.
https://github.com/t3easy/docker-php/blob/master/7.2/Dockerfile#L3-L10
Updated by Riccardo De Contardi almost 7 years ago
- Related to Feature #79909: Allow crypto via libsodium as alternative to openssl added
Updated by Jan Kiesewetter almost 7 years ago
Seems like the default config of openssl and libressl are different.
Copy over the openssl.cnf from openssl seems to work. I'll check some more...
Updated by Jan Kiesewetter almost 7 years ago
OK, problem is the openssl.cnf from libressl has not set:
default_bits = 2048
default_md = sha256
What about to return openssl_error_string there: https://github.com/TYPO3/TYPO3.CMS/blob/05e4d107bac8ea6bbdb550c667d2480347feb2ba/typo3/sysext/install/Classes/SystemEnvironment/Check.php#L532
http://php.net/openssl_error_string
Updated by Jan Kiesewetter almost 7 years ago
I've opened a bug in the php image
https://github.com/docker-library/php/issues/569
Updated by Jan Kiesewetter almost 7 years ago
Maybe TYPO3 should not depend on the default_ openssl settings but add them to FactoryConfiguration?
Updated by Gerrit Code Review almost 5 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62918
Updated by Benni Mack almost 5 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset b38eac13df45674881dff188a30685890df37c6a.
Updated by Gerrit Code Review almost 5 years ago
- Status changed from Resolved to Under Review
Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62945
Updated by Gerrit Code Review almost 5 years ago
Patch set 2 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62945
Updated by Benni Mack almost 5 years ago
- Status changed from Under Review to Resolved
Applied in changeset cb1cc8a8ffc4d57b2d756b7a8f2b8793aa40af1b.