[PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[max]

ID: 9177
User Update by: [EMAIL PROTECTED]
Old-Status: Closed
Status: Open
Bug Type: *Encryption and hash functions
Description: crypt problems with openssl

It doesn't seem like it was fixed.  From CVS checked about about 30 minutes ago, 
configure says:

checking for MD5 crypt... no

And a simple script that is supposed to return an md5 crypted string, returns a DES 
crypted string.

--BEG SCRIPT--

--END SCRIPT--

--BEG OUTPUT--
$1Hat1hn6A1pw
--END OUTPUT--

When php is compiled without openssl, the correct output is acquired which is:

$1$rasmusle$rISCgZzpwk3UhDidwXvin0

(I hope it is alright to re-open the bug)

Previous Comments:
---

[2001-04-23 03:34:55] [EMAIL PROTECTED]
Fixed in CVS.

--Jani


---

[2001-02-18 16:41:52] [EMAIL PROTECTED]
My bad. It was only discussed about, not fixed..

--Jani


---

[2001-02-15 11:35:43] [EMAIL PROTECTED]
IIRC this is fixed already in CVS so please try the latest CVS snapshot 
from http://snaps.php.net/

--Jani


---

[2001-02-08 14:39:57] [EMAIL PROTECTED]
MD5 crypt fails if PHP is compiled with openssl (specifically with the -lcrypto)

If the .c file comes before the libraries, gcc won't recognize MD5 crypt:

- blah.c -
root# cat blah.c 
#include 

main() {
char salt[15], answer[40];

salt[0]='$'; salt[1]='1'; salt[2]='$'; 
salt[3]='r'; salt[4]='a'; salt[5]='s';
salt[6]='m'; salt[7]='u'; salt[8]='s';
salt[9]='l'; salt[10]='e'; salt[11]='$';
salt[12]='

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[Boian Bonev]

> > Well, I think it's just the link order of libraries. ie. the
> > openssl lib should be before libc..but is that even possible?
> > Or just add another entry for libc after ssl?
> Might be possible to do some kludge with the link order, I would prefer
> that OpenSSL changed a bit though, I'll probably have to go nag them
> again. OpenLDAP needs this to be fixed as well, and I'm sure there are
> other programs with the same problem.

it will not be possible for libc. i have solved similar problem with two
conflicting libs thus:

gcc -o something -l lib-i-want-to-discard-conflicting-foo
...path/lib-with-preffered-conflicting-foo.so[mething] 

gnu ld looks in objects tagged for linkage and then in libraries. afaik libc
is the last place ld will process and there is no chance to fool it.

the best solution is to fix openssl.

b.


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[sniper]

ID: 9177
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Feedback
Status: Open
Bug Type: *Install and Config
Assigned To: 
Comments:

My bad. It was only discussed about, not fixed..

--Jani


Previous Comments:
---

[2001-02-15 11:35:43] [EMAIL PROTECTED]
IIRC this is fixed already in CVS so please try the latest CVS snapshot 
from http://snaps.php.net/

--Jani


---

[2001-02-08 14:39:57] [EMAIL PROTECTED]
MD5 crypt fails if PHP is compiled with openssl (specifically with the -lcrypto)

If the .c file comes before the libraries, gcc won't recognize MD5 crypt:

- blah.c -
root# cat blah.c 
#include 

main() {
char salt[15], answer[40];

salt[0]='$'; salt[1]='1'; salt[2]='$'; 
salt[3]='r'; salt[4]='a'; salt[5]='s';
salt[6]='m'; salt[7]='u'; salt[8]='s';
salt[9]='l'; salt[10]='e'; salt[11]='$';
salt[12]='

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[Jani Taskinen]

On Thu, 15 Feb 2001, Stig Venaas wrote:

>> Well, I think it's just the link order of libraries. ie. the
>> openssl lib should be before libc..but is that even possible?
>> Or just add another entry for libc after ssl?
>
>Might be possible to do some kludge with the link order, I would prefer
>that OpenSSL changed a bit though, I'll probably have to go nag them
>again. OpenLDAP needs this to be fixed as well, and I'm sure there are
>other programs with the same problem.

In that case, let's nag the openssl people. And close the bug reports
regarding this as it clearly isn't our problem then? :)

--Jani


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[Stig Venaas]

On Thu, Feb 15, 2001 at 08:29:57PM +0100, Jani Taskinen wrote:
> On Thu, 15 Feb 2001, Stig Venaas wrote:
> >Are you sure? I haven't seen any fix. Could someone tell me what was
> 
> Oh? I remembered incorrectly then..I thought you were the one who
> fixed it.. :)

I don't mind the credit (:

> Well, I think it's just the link order of libraries. ie. the
> openssl lib should be before libc..but is that even possible?
> Or just add another entry for libc after ssl?

Might be possible to do some kludge with the link order, I would prefer
that OpenSSL changed a bit though, I'll probably have to go nag them
again. OpenLDAP needs this to be fixed as well, and I'm sure there are
other programs with the same problem.

Stig

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[Jani Taskinen]

On Thu, 15 Feb 2001, Stig Venaas wrote:

>On Thu, Feb 15, 2001 at 04:35:43PM -, [EMAIL PROTECTED] wrote:
>> ID: 9177
>> Updated by: sniper
>> Reported By: [EMAIL PROTECTED]
>> Old-Status: Open
>> Status: Feedback
>> Bug Type: *Install and Config
>> Assigned To:
>> Comments:
>>
>> IIRC this is fixed already in CVS so please try the latest CVS snapshot
>> from http://snaps.php.net/
>
>Are you sure? I haven't seen any fix. Could someone tell me what was

Oh? I remembered incorrectly then..I thought you were the one who
fixed it.. :)

It might have just been a discussion about it then.

>done? I've encountered this problem other places as well. The problem
>is that OpenSSL has its own crypt() that only supports DES. It's left
>out on FreeBSD and should also be left out on Linux I think. I've
>asked about this on the OpenSSL list but no response yet. If anyone
>knows a clever work around, please tell me (:

Well, I think it's just the link order of libraries. ie. the
openssl lib should be before libc..but is that even possible?
Or just add another entry for libc after ssl?

--Jani



-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[Stig Venaas]

On Thu, Feb 15, 2001 at 04:35:43PM -, [EMAIL PROTECTED] wrote:
> ID: 9177
> Updated by: sniper
> Reported By: [EMAIL PROTECTED]
> Old-Status: Open
> Status: Feedback
> Bug Type: *Install and Config
> Assigned To: 
> Comments:
> 
> IIRC this is fixed already in CVS so please try the latest CVS snapshot 
> from http://snaps.php.net/

Are you sure? I haven't seen any fix. Could someone tell me what was
done? I've encountered this problem other places as well. The problem
is that OpenSSL has its own crypt() that only supports DES. It's left
out on FreeBSD and should also be left out on Linux I think. I've
asked about this on the OpenSSL list but no response yet. If anyone
knows a clever work around, please tell me (:

Stig

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP-DEV] PHP 4.0 Bug #9177 Updated: crypt problems with openssl

[sniper]

ID: 9177
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Feedback
Bug Type: *Install and Config
Assigned To: 
Comments:

IIRC this is fixed already in CVS so please try the latest CVS snapshot 
from http://snaps.php.net/

--Jani


Previous Comments:
---

[2001-02-08 14:39:57] [EMAIL PROTECTED]
MD5 crypt fails if PHP is compiled with openssl (specifically with the -lcrypto)

If the .c file comes before the libraries, gcc won't recognize MD5 crypt:

- blah.c -
root# cat blah.c 
#include 

main() {
char salt[15], answer[40];

salt[0]='$'; salt[1]='1'; salt[2]='$'; 
salt[3]='r'; salt[4]='a'; salt[5]='s';
salt[6]='m'; salt[7]='u'; salt[8]='s';
salt[9]='l'; salt[10]='e'; salt[11]='$';
salt[12]='

-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]