1.2.1564. ext/openssl

Extension Openssl.

This extension binds functions of OpenSSL library for symmetric and asymmetric encryption and decryption, PBKDF2, PKCS7, PKCS12, X509 and other cryptographic operations. In addition to that it provides implementation of TLS streams.

<?php
// $data and $signature are assumed to contain the data and the signature

// fetch public key from certificate and ready it
$pubkeyid = openssl_pkey_get_public("file://src/openssl-0.9.6/demos/sign/cert.pem");

// state whether signature is okay or not
$ok = openssl_verify($data, $signature, $pubkeyid);
if ($ok == 1) {
    echo "good";
} elseif ($ok == 0) {
    echo "bad";
} else {
    echo "ugly, error checking signature";
}
// free the key from memory
openssl_free_key($pubkeyid);
?>

See also ext/OpenSSL and OpenSSL.

1.2.1564.1. Specs

Short name	Extensions/Extopenssl
Rulesets	All, Appinfo, CE, Changed Behavior
Exakat since	0.8.4
PHP Version	All
Severity
Time To Fix
Precision	Very high
Available in	Entreprise Edition, Community Edition, Exakat Cloud