Test ext/openssl/tests/bug74022.phpt failed on openssl 3.0.6

[andypost]

Description

The following test fails on all arches when building new RC for 8.1.12 using OpenSSL 3.0.6

TEST 1/1 [ext/openssl/tests/bug74022.phpt]
========DIFF========
     bool(true)
002+ string(65) "error:05880106:x509 certificate routines::passed invalid argument"
002- bool(false)
========DONE========

Probably configuration of openssl is verbose somehow

Used to access the key

~/aports/community/php81 $ openssl verify src/php-8.1.12RC1/ext/openssl/tests/bug74022.pfx 
Enter pass phrase for PKCS12 import pass phrase:
C = IN, ST = UK, L = NOIDA, O = SPACE, OU = ENTER, CN = Chandra Kishor, emailAddress = ckmailid@gmail.com
error 18 at 0 depth lookup: self-signed certificate
C = IN, ST = UK, L = NOIDA, O = SPACE, OU = ENTER, CN = Chandra Kishor, emailAddress = ckmailid@gmail.com
error 10 at 0 depth lookup: certificate has expired
error src/php-8.1.12RC1/ext/openssl/tests/bug74022.pfx: verification failed

PHP Version

PHP 8.1.12RC1

Operating System

Alpinelinux

Ref https://gitlab.alpinelinux.org/alpine/aports/-/jobs/870313

[andypost]

~/aports/community/php81 $ openssl x509 -in src/php-8.1.12RC1/ext/openssl/tests/bug74022.pfx -text -noout
...
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)

Guess it fails because RSA used

Ref https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/39644

[andypost]

The test was mentioned in #7002

[cmb69]

That's interesting, because that test fails for me only with OpenSSL 3.0.6 (but passes with OpenSSL 3.0.5).

[cmb69]

It's strange: PKCS12_parse() reports success (returns non-zero), but still files that error. Is this perhaps an upstream issue? @bukka, any ideas?

[andypost]

Sorry, yes, it fails only on 3.0.6 - my local docker image was 3.0.5 but it was some weirdness in Alpine

$ openssl version
OpenSSL 3.0.5 5 Jul 2022 (Library: OpenSSL 3.0.6 11 Oct 2022)

[andypost]

There's a big message of some fixed deprecated functionality https://www.openssl.org/news/cl30.txt

[cmb69]

They just have withdrawn OpenSSL 1.1.1r and 3.0.6. So we can close this ticket, too.