Repository navigation
OpenSSL legacy providers not available on Windows #9890
Description
Description
As OpenSSL 3 has disabled legacy algorithms by default we need a way to reactivate them.
This seems not to be possible with the current RC of PHP 8.2 on Windows:
I took the configuration file from https://salsa.debian.org/php-team/pear/php-dapphp-radius/-/merge_requests/2/diffs
Maybee legacy.dll is simply missing?
PHP Version
PHP 8.2.0RC5
Operating System
Windows 10
Activity
cmb69 commentedon Nov 4, 2022
Thanks for reporting!
Indeed, we do not ship legacy.dll yet (but we should). It is contained in the openssl-3.0.7-vs16-x64.zip, though, and you can use that for now. Just put lib/openssl-modules/legacy.dll somewhere, and set the environment variable
OPENSSL_MODULESto the folder where you've put legacy.dll. (It seems the current default doesn't make much sense since we switched the default config path; need to check that.)[-][8.2.0RC5] OpenSSL legacy providers on Windows[/-][+]OpenSSL legacy providers not available on Windows[/+]Fix phpGH-9890: OpenSSL legacy providers not available on Windows
JanSlabon commentedon Nov 8, 2022
Thanks for checking this! Your workaround with the
OPENSSL_MODULESenvironment variable works for us for now.Document OpenSSL legacy.dll provider on Windows
Document OpenSSL legacy.dll provider on Windows
bukka commentedon Nov 13, 2022
The question has been answered and workaround works. Don't think there's anything else to do.
bukka commentedon Nov 13, 2022
Ok I just see #9894 is still open so will re-open this.
Fix GH-9890: OpenSSL legacy providers not available on Windows
Merge branch 'PHP-8.2'
Merge branch 'master' into unserialize-notice-to-warning
abhishek--ranjan commentedon Dec 17, 2023
what is the alternate to read the cert without fallback on the legacy dll.
the issue is similar with most of the open ssl methods in php
$certData = openssl_x509_read($certInput); //does not work
[cert] => -----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgIFbg38IWEwDQYJKoZIhvcNAQELBQAwgZMxCzAJBgNVBAYT
AklOMS0wKwYDVQQKEyRDYXByaWNvcm4gSWRlbnRpdHkgU2VydmljZXMgUHZ0IEx0
Document OpenSSL legacy.dll provider on Windows (GH-1966)