| Summary: | php mysqli does not support SSL connections | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Josh <jokajak> |
| Component: | php | Assignee: | Remi Collet <rcollet> |
| Status: | CLOSED ERRATA | QA Contact: | BaseOS QE - Apps <qe-baseos-apps> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.0 | CC: | jokajak, jorton |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-10-29 13:20:42 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
This should work as of the 5.3.3 update, do you still see problems? This request was evaluated by Red Hat Product Management for inclusion in the current release of Red Hat Enterprise Linux. Because the affected component is not scheduled to be updated in the current release, Red Hat is unfortunately unable to address this request at this time. Red Hat invites you to ask your support representative to propose this request, if appropriate and relevant, in the next release of Red Hat Enterprise Linux. If you would like it considered as an exception in the current release, please ask your support representative. This issue is no longer a problem for us as we've moved away from utilizing it. I believe it was corrected in the past (as in we haven't had to apply this patch again). |
Description of problem: php mysqli does not properly support SSL options Version-Release number of selected component (if applicable): 5.3.2-6.el6_0.1.x86_64 How reproducible: always Reproduce code: --------------- <?php ini_set('display_errors', 1); error_reporting(E_ALL); $mysqli = mysqli_init(); $mysqli->ssl_set('./cert/client-key.pem', './cert/client-cert.pem', './cert/mysql-cacert.pem', null, null); $mysqli->real_connect('removed', '', '', ''); if ($r = $mysqli->query("SHOW STATUS LIKE 'Ssl_cipher'")) { var_dump($r->fetch_row()); } echo $mysqli->error."\n"; echo $mysqli->errno."\n"; ?> Actual result: -------------- Warning: mysqli::ssl_set(): invalid object or resource mysqli with MYSQLI_CLIENT_SSL Can't connect to MySQL server on 'removed' (113) errno = 2003 without MYSQLI_CLIENT_SSL Warning: mysqli::real_connect(): (28000/1045): Access denied for user 'removed' (using password: YES) errno = 1045 ssl_set() in this case returns NULL, not true as doc says. Expected result: ---------------- something like this for Ssl_cipher array(2) { [0]=> string(10) "Ssl_cipher" [1]=> string(18) "DHE-RSA-AES256-SHA" } and no errors. Additional info: see http://bugs.php.net/51026