123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354 |
- --TEST--
- Bug #68879: Match IP address fields in subjectAltName checks
- --EXTENSIONS--
- openssl
- --SKIPIF--
- <?php
- if (!function_exists("proc_open")) die("skip no proc_open");
- ?>
- --FILE--
- <?php
- $certFile = __DIR__ . DIRECTORY_SEPARATOR . 'bug68879.pem.tmp';
- $san = 'DNS:test.com, DNS:www.test.com, DNS:subdomain.test.com, IP:0:0:0:0:0:FFFF:A02:1, IP:10.2.0.1';
- $serverCode = <<<'CODE'
- $serverUri = "ssl://127.0.0.1:64321";
- $serverFlags = STREAM_SERVER_BIND | STREAM_SERVER_LISTEN;
- $serverCtx = stream_context_create(['ssl' => [
- 'local_cert' => '%s',
- ]]);
- $server = stream_socket_server($serverUri, $errno, $errstr, $serverFlags, $serverCtx);
- phpt_notify();
- stream_socket_accept($server, 30);
- CODE;
- $serverCode = sprintf($serverCode, $certFile);
- $clientCode = <<<'CODE'
- $serverUri = "ssl://127.0.0.1:64321";
- $clientFlags = STREAM_CLIENT_CONNECT;
- $clientCtx = stream_context_create(['ssl' => [
- 'verify_peer' => false,
- 'verify_peer_name' => true,
- 'peer_name' => '10.2.0.1',
- ]]);
- phpt_wait();
- var_dump(stream_socket_client($serverUri, $errno, $errstr, 30, $clientFlags, $clientCtx));
- CODE;
- include 'CertificateGenerator.inc';
- $certificateGenerator = new CertificateGenerator();
- $certificateGenerator->saveNewCertAsFileWithKey('test.com', $certFile, null, $san);
- include 'ServerClientTestCase.inc';
- ServerClientTestCase::getInstance()->run($clientCode, $serverCode);
- ?>
- --CLEAN--
- <?php
- @unlink(__DIR__ . DIRECTORY_SEPARATOR . 'bug68879.pem.tmp');
- ?>
- --EXPECTF--
- resource(%d) of type (stream)
|