From: Pierre Joye <pajoye@php.net>
Date: Sat, 19 May 2007 22:04:27 +0000 (+0000)
Subject: - #41423, PHP assumes wrongly that certain ciphers are enabled in OpenSSL
X-Git-Tag: RELEASE_1_4~125
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0f7a838d0bab3aa3494c3fcc13460ff0d8409ced;p=php

- #41423, PHP assumes wrongly that certain ciphers are enabled in OpenSSL
---

diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c
index 10bd475eeb..cf27b2b08a 100644
--- a/ext/openssl/openssl.c
+++ b/ext/openssl/openssl.c
@@ -693,11 +693,15 @@ PHP_MINIT_FUNCTION(openssl)
 	REGISTER_LONG_CONSTANT("OPENSSL_PKCS1_OAEP_PADDING", RSA_PKCS1_OAEP_PADDING, CONST_CS|CONST_PERSISTENT);
 
 	/* Ciphers */
+#ifndef OPENSSL_NO_RC2
 	REGISTER_LONG_CONSTANT("OPENSSL_CIPHER_RC2_40", PHP_OPENSSL_CIPHER_RC2_40, CONST_CS|CONST_PERSISTENT);
 	REGISTER_LONG_CONSTANT("OPENSSL_CIPHER_RC2_128", PHP_OPENSSL_CIPHER_RC2_128, CONST_CS|CONST_PERSISTENT);
 	REGISTER_LONG_CONSTANT("OPENSSL_CIPHER_RC2_64", PHP_OPENSSL_CIPHER_RC2_64, CONST_CS|CONST_PERSISTENT);
+#endif
+#ifndef OPENSSL_NO_DES
 	REGISTER_LONG_CONSTANT("OPENSSL_CIPHER_DES", PHP_OPENSSL_CIPHER_DES, CONST_CS|CONST_PERSISTENT);
 	REGISTER_LONG_CONSTANT("OPENSSL_CIPHER_3DES", PHP_OPENSSL_CIPHER_3DES, CONST_CS|CONST_PERSISTENT);
+#endif
 
 	/* Values for key types */
 	REGISTER_LONG_CONSTANT("OPENSSL_KEYTYPE_RSA", OPENSSL_KEYTYPE_RSA, CONST_CS|CONST_PERSISTENT);
@@ -2930,6 +2934,7 @@ PHP_FUNCTION(openssl_pkcs7_encrypt)
 
 	/* sanity check the cipher */
 	switch (cipherid) {
+#ifndef OPENSSL_NO_RC2
 		case PHP_OPENSSL_CIPHER_RC2_40:
 			cipher = EVP_rc2_40_cbc();
 			break;
@@ -2939,12 +2944,17 @@ PHP_FUNCTION(openssl_pkcs7_encrypt)
 		case PHP_OPENSSL_CIPHER_RC2_128:
 			cipher = EVP_rc2_cbc();
 			break;
+#endif
+
+#ifndef OPENSSL_NO_DES
 		case PHP_OPENSSL_CIPHER_DES:
 			cipher = EVP_des_cbc();
 			break;
 		case PHP_OPENSSL_CIPHER_3DES:
 			cipher = EVP_des_ede3_cbc();
 			break;
+#endif
+
 		default:
 			php_error_docref(NULL TSRMLS_CC, E_WARNING, "Invalid cipher type `%ld'", cipherid);
 			goto clean_exit;