Compare commits

..

17 Commits

Author SHA1 Message Date
c9659f15c9 Add 'DOC/README.install-openssl-1.1.1'. 2024-06-28 10:15:22 +02:00
ec717642fc mod_php_install.sh: set default max_execution_time to 360s. 2024-05-06 00:37:06 +02:00
0d94d23fe3 mod_php_install.sh: add timeout parameter. 2024-04-26 00:24:40 +02:00
f9f247aa1d mod_php_install.sh: change DEFAULT_FPM_POOL_MAX_CHILDREN to 256. 2024-04-21 16:08:02 +02:00
4d545d07ce mod_php_install.sh: incease DEFAULT_OPCACHE_INTERNED_STRINGS_BUFFER to '48'. 2024-02-14 17:06:07 +01:00
dae3f913bb mod_php_install.sh: show existing FPM pool definitions in summary. 2024-01-03 14:11:09 +01:00
7b17ac342a mod_php_install.sh: finish support fo debian 12 (bookworm). 2023-10-26 21:26:39 +02:00
3959e37839 mod_php_install.sh: add support for version 7.1 at debian 12 (bookworm). 2023-10-25 02:27:38 +02:00
7addd36d29 mod_php_install.sh: fix error installing python 2.7 2023-10-25 00:50:13 +02:00
79b141353b mod_php_install.sh: support php 5.6 at debian 12 (bookworm). 2023-10-24 22:29:16 +02:00
942b735491 mod_php_install.sh: add mod_php support for versions 8.x 2023-07-05 16:23:42 +02:00
cf88af8874 mod_php_install.sh: fix error setting parameter opcache.error_log. 2023-06-23 16:28:20 +02:00
c7ea9f5ebb Add Patch to compile PHP (7.4, 8.0?) againmst openssl 3.0. 2023-06-18 10:14:45 +02:00
de34143a3b mod_php_install.sh: add support for adjusting apcu values. 2023-04-29 01:58:26 +02:00
5c3249b12c mod_php_install.sh: add support for setting 'zlib.output_compression' and 'opcache.consistency_checks' at install time. Change some default values for 'opcache'. 2023-04-25 01:58:35 +02:00
4f4b3d67be mod_php_install.sh: replace PHP socket, in case of php update.. 2023-03-17 17:27:51 +01:00
040965430e mod_php_install.sh: some moinor changes in script output.. 2023-03-14 09:50:54 +01:00
4 changed files with 1516 additions and 133 deletions

View File

@ -0,0 +1,49 @@
# ----------
# Install openssl version 1.x
# ----------
OPENSSL1_VERSION="1.1.1w"
_archive_file="openssl-${OPENSSL1_VERSION}.tgz"
_download_url="https://www.openssl.org/source/openssl-${OPENSSL1_VERSION}.tar.gz"
_src_dir="/usr/local/src/openssl"
_build_dir="${_src_dir}/openssl-${OPENSSL1_VERSION}"
_install_dir="/usr/local/openssl-${OPENSSL1_VERSION}"
# Create source directory
#
mkdir -p "$_src_dir"
# Get source '$_archive_file' ..
#
wget -O "${_src_dir}/$_archive_file" ${_download_url}
# Unpack archive '$_archive_file'..
#
cd "$_src_dir"
gunzip < "${_archive_file}" | tar -xf -
# Configure openssl
#
cd "$_build_dir"
config_params="--prefix=${_install_dir} --openssldir=${_install_dir}"
./config ${config_params}
# Compile openssl
#
make
# Install openssl
#
make install
# Set symlink /usr/local/openssl -> /usr/local/openssl-${OPENSSL1_VERSION}
#
ln -s openssl-${OPENSSL1_VERSION} /usr/local/openssl-1.1.1

View File

@ -0,0 +1,54 @@
diff -Naur openssl/openssl.c openssl-NEU/openssl.c
--- openssl/openssl.c 2022-10-31 11:36:06.000000000 +0100
+++ openssl-NEU/openssl.c 2023-06-18 09:45:19.793215668 +0200
@@ -1517,7 +1517,9 @@
REGISTER_LONG_CONSTANT("PKCS7_NOSIGS", PKCS7_NOSIGS, CONST_CS|CONST_PERSISTENT);
REGISTER_LONG_CONSTANT("OPENSSL_PKCS1_PADDING", RSA_PKCS1_PADDING, CONST_CS|CONST_PERSISTENT);
+#ifdef RSA_SSLV23_PADDING
REGISTER_LONG_CONSTANT("OPENSSL_SSLV23_PADDING", RSA_SSLV23_PADDING, CONST_CS|CONST_PERSISTENT);
+#endif
REGISTER_LONG_CONSTANT("OPENSSL_NO_PADDING", RSA_NO_PADDING, CONST_CS|CONST_PERSISTENT);
REGISTER_LONG_CONSTANT("OPENSSL_PKCS1_OAEP_PADDING", RSA_PKCS1_OAEP_PADDING, CONST_CS|CONST_PERSISTENT);
diff -Naur openssl/tests/bug28382.phpt openssl-NEU/tests/bug28382.phpt
--- openssl/tests/bug28382.phpt 2022-10-31 11:36:06.000000000 +0100
+++ openssl-NEU/tests/bug28382.phpt 2023-06-18 09:48:26.813627405 +0200
@@ -9,11 +9,10 @@
$cert = file_get_contents(__DIR__ . "/bug28382cert.txt");
$ext = openssl_x509_parse($cert);
var_dump($ext['extensions']);
-/* openssl 1.0 prepends the string "Full Name:" to the crlDistributionPoints array key.
- For now, as this is the one difference only between 0.9.x and 1.x, it's handled with
- placeholders to not to duplicate the test. When more diffs come, a duplication would
- be probably a better solution.
-*/
+/*
+ * The reason for %A at the end of crlDistributionPoints and authorityKeyIdentifier is that
+ * OpenSSL 3.0 removes new lines which were present in previous versions.
+ */^
?>
--EXPECTF--
array(11) {
@@ -24,8 +23,7 @@
["nsCertType"]=>
string(30) "SSL Client, SSL Server, S/MIME"
["crlDistributionPoints"]=>
- string(%d) "%AURI:http://mobile.blue-software.ro:90/ca/crl.shtml
-"
+ string(%d) "Full Name:%AURI:http://mobile.blue-software.ro:90/ca/crl.shtml%A"
["nsCaPolicyUrl"]=>
string(38) "http://mobile.blue-software.ro:90/pub/"
["subjectAltName"]=>
@@ -33,9 +31,8 @@
["subjectKeyIdentifier"]=>
string(59) "B0:A7:FF:F9:41:15:DE:23:39:BD:DD:31:0F:97:A0:B2:A2:74:E0:FC"
["authorityKeyIdentifier"]=>
- string(115) "DirName:/C=RO/ST=Romania/L=Craiova/O=Sergiu/OU=Sergiu SRL/CN=Sergiu CA/emailAddress=n_sergiu@hotmail.com
-serial:00
-"
+ string(%d) "DirName:/C=RO/ST=Romania/L=Craiova/O=Sergiu/OU=Sergiu SRL/CN=Sergiu CA/emailAddress=n_sergiu@hotmail.com
+serial:00%A"
["keyUsage"]=>
string(71) "Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment"
["nsBaseUrl"]=>

View File

@ -0,0 +1,54 @@
diff -Naur openssl/openssl.c openssl-NEU/openssl.c
--- openssl/openssl.c 2023-08-03 19:13:08.000000000 +0200
+++ openssl-NEU/openssl.c 2023-10-26 17:06:39.953717955 +0200
@@ -1325,7 +1325,9 @@
REGISTER_LONG_CONSTANT("OPENSSL_CMS_NOSIGS", CMS_NOSIGS, CONST_CS|CONST_PERSISTENT);
REGISTER_LONG_CONSTANT("OPENSSL_PKCS1_PADDING", RSA_PKCS1_PADDING, CONST_CS|CONST_PERSISTENT);
+#ifdef RSA_SSLV23_PADDING
REGISTER_LONG_CONSTANT("OPENSSL_SSLV23_PADDING", RSA_SSLV23_PADDING, CONST_CS|CONST_PERSISTENT);
+#endif
REGISTER_LONG_CONSTANT("OPENSSL_NO_PADDING", RSA_NO_PADDING, CONST_CS|CONST_PERSISTENT);
REGISTER_LONG_CONSTANT("OPENSSL_PKCS1_OAEP_PADDING", RSA_PKCS1_OAEP_PADDING, CONST_CS|CONST_PERSISTENT);
diff -Naur openssl/tests/bug28382.phpt openssl-NEU/tests/bug28382.phpt
--- openssl/tests/bug28382.phpt 2023-08-03 19:13:08.000000000 +0200
+++ openssl-NEU/tests/bug28382.phpt 2023-10-26 17:10:51.538942020 +0200
@@ -9,11 +9,10 @@
$cert = file_get_contents(__DIR__ . "/bug28382cert.txt");
$ext = openssl_x509_parse($cert);
var_dump($ext['extensions']);
-/* openssl 1.0 prepends the string "Full Name:" to the crlDistributionPoints array key.
- For now, as this is the one difference only between 0.9.x and 1.x, it's handled with
- placeholders to not to duplicate the test. When more diffs come, a duplication would
- be probably a better solution.
-*/
+/*
+ * The reason for %A at the end of crlDistributionPoints and authorityKeyIdentifier is that
+ * OpenSSL 3.0 removes new lines which were present in previous versions.
+ */^
?>
--EXPECTF--
array(11) {
@@ -24,8 +23,7 @@
["nsCertType"]=>
string(30) "SSL Client, SSL Server, S/MIME"
["crlDistributionPoints"]=>
- string(%d) "%AURI:http://mobile.blue-software.ro:90/ca/crl.shtml
-"
+ string(%d) "Full Name:%AURI:http://mobile.blue-software.ro:90/ca/crl.shtml%A"
["nsCaPolicyUrl"]=>
string(38) "http://mobile.blue-software.ro:90/pub/"
["subjectAltName"]=>
@@ -33,9 +31,8 @@
["subjectKeyIdentifier"]=>
string(59) "B0:A7:FF:F9:41:15:DE:23:39:BD:DD:31:0F:97:A0:B2:A2:74:E0:FC"
["authorityKeyIdentifier"]=>
- string(115) "DirName:/C=RO/ST=Romania/L=Craiova/O=Sergiu/OU=Sergiu SRL/CN=Sergiu CA/emailAddress=n_sergiu@hotmail.com
-serial:00
-"
+ string(%d) "DirName:/C=RO/ST=Romania/L=Craiova/O=Sergiu/OU=Sergiu SRL/CN=Sergiu CA/emailAddress=n_sergiu@hotmail.com
+serial:00%A"
["keyUsage"]=>
string(71) "Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment"
["nsBaseUrl"]=>

File diff suppressed because it is too large Load Diff