Issues

• TLS close_notify is sent after stream_socket_shutdown(SHUT_WR)

  Extension: openssl
  php/php-src#24119 · Filter by author bukka opened on Oct 4, 2026
  

• ext/openssl: Support detached signatures with S/MIME encoding

  Extension: openssl
  Unread
  php/php-src#24096·adapik opened Oct 3, 2026 · Updated Oct 3, 2026

• ext/openssl: Add validation for XOF digests requiring explicit output length

  Extension: openssl
  Unread
  php/php-src#24079·adapik opened Oct 2, 2026 · Updated Oct 2, 2026

• ext/openssl: openssl_get_md_methods - list only available digest algorithms

  Extension: openssl
  Unread
  php/php-src#24077·adapik opened Oct 2, 2026 · Updated Oct 2, 2026

• ext/openssl: Extend test for openssl_digest()

  Extension: openssl
  Unread
  php/php-src#24076·adapik opened Oct 2, 2026 · Updated Oct 2, 2026

• ext/openssl: fix use after free when callbacks close streams

  Extension: openssl
  Unread
  php/php-src#24065·DanielEScherzer opened Oct 2, 2026 · Updated Oct 7, 2026
  5

• Fix GH-20175: CertificateGenerator falls back to 1024-bit keys

  Extension: openssl
  Unread
  php/php-src#24060·bukka opened Oct 1, 2026 · Updated Oct 1, 2026

• Fix GH-21545: openssl_x509_parse() validTo_time_t after the year 3000

  Extension: openssl
  Unread
  php/php-src#24058·bukka opened Oct 1, 2026 · Updated Oct 2, 2026
  5

• Add openssl_get_channel_binding

  Category: OptimizerExtension: openssl
  Unread
  php/php-src#24035·Sjord opened Oct 1, 2026 · Updated Oct 7, 2026
  5

• IO hooks PoC

  ABI breakCategory: Build SystemCategory: CICategory: DNSCategory: EngineCategory: FilesystemCategory: IOCategory: StreamsExtension: curlExtension: hashExtension: libxmlExtension: mysqliExtension: mysqlndExtension: opensslExtension: pcntlExtension: reflectionExtension: socketsExtension: standardExtension: xmlreaderExtension: xmlwriterSTF: Streams
  Unread
  php/php-src#23997·bukka opened Sep 29, 2026 · Updated Oct 8, 2026·Draft
  11

• ext/openssl: openssl_x509_checkpurpose - allow to check if the certificate is revoked + partial chain

  Extension: openssl
  Unread
  php/php-src#23988·adapik opened Sep 29, 2026 · Updated Sep 29, 2026

• Fix/stream seek negative position

  ABI breakCategory: Build SystemCategory: EngineCategory: OptimizerExtension: curlExtension: dateExtension: domExtension: ffiExtension: ftpExtension: hashExtension: intlExtension: jsonExtension: ldapExtension: mbstringExtension: mysqliExtension: mysqlndExtension: opcacheExtension: opensslExtension: pcntlExtension: pcreExtension: pdo (core)Extension: pdo_mysqlExtension: pdo_sqliteExtension: pgsqlExtension: posixExtension: randomExtension: readlineExtension: reflectionExtension: sessionExtension: simplexmlExtension: soapExtension: splExtension: sqlite3Extension: standardExtension: xmlExtension: zend_testSAPI: apache2handlerSAPI: cgiSAPI: cliSAPI: fpmSAPI: fuzzerSAPI: litespeedSAPI: phpdbg
  Unread
  php/php-src#23907·marc-mabe opened Sep 25, 2026 · Updated Oct 8, 2026
  14

• Implement GH-23879: Do not report an error on a zero accept timeout

  ABI breakExtension: opensslExtension: standard
  Unread
  php/php-src#23880·lazerg opened Sep 24, 2026 · Updated Oct 8, 2026
  7

• stream_is_local(): unwrap zlib and bzip2 wrappers if needed

  ABI breakCategory: StreamsExtension: bz2Extension: opensslExtension: pharExtension: standardExtension: zipExtension: zlib
  Unread
  php/php-src#23714·DanielEScherzer opened Sep 17, 2026 · Updated Oct 5, 2026
  17

• Fix GH-20920: fix build with LibreSSL

  Extension: openssl
  Unread
  php/php-src#23689·gvozdetsky opened Sep 15, 2026 · Updated Sep 15, 2026

• ext/openssl: Defer pkcs7/cms verify output writes until verification succeeds

  Extension: openssl
  Unread
  php/php-src#23651·iliaal opened Sep 10, 2026 · Updated Sep 11, 2026
  2

• ext/openssl: allow openssl_sign()/openssl_verify() to sign/verify a precomputed digest

  Extension: openssl
  Unread
  php/php-src#23506·2akouwu opened Aug 29, 2026 · Updated Oct 1, 2026
  4

• openssl_sign() cannot sign a precomputed digest

  Extension: opensslFeatureStatus: Verified
  php/php-src#23422 · Filter by author timo-poppinga opened on Aug 23, 2026

• [%pS migration] Use %pS in ext/openssl

  Extension: openssl
  Unread
  php/php-src#23160·DanielEScherzer opened Aug 9, 2026 · Updated Oct 5, 2026

• Add bounded test directory concurrency

  Extension: curlExtension: openssl
  Unread
  php/php-src#22945·NickSdot opened Jul 30, 2026 · Updated Jul 30, 2026·Draft

• Improves test suite performance by 8.5-25x [experiment!]

  Category: CIExtension: curlExtension: gdExtension: opcacheExtension: opensslExtension: pdo (core)Extension: pdo_dblibExtension: pharExtension: shmopExtension: snmpExtension: socketsExtension: sodiumExtension: standardExtension: sysvmsgExtension: sysvshmExtension: zipSAPI: cli
  Unread
  php/php-src#22917·NickSdot opened Jul 29, 2026 · Updated Aug 12, 2026·Draft
  7

• Add Post-Quantum Cryptography Support

  Extension: opensslFeatureStatus: Requires RFC
  php/php-src#22862 · Filter by author puhley opened on Jul 22, 2026
  

• Tests: Test exception type in error tests

  Extension: bcmathExtension: bz2Extension: calendarExtension: curlExtension: dateExtension: dbaExtension: domExtension: exifExtension: ffiExtension: fileinfoExtension: filterExtension: ftpExtension: gdExtension: gettextExtension: gmpExtension: hashExtension: iconvExtension: intlExtension: jsonExtension: ldapExtension: libxmlExtension: mbstringExtension: mysqliExtension: odbcExtension: opcacheExtension: opensslExtension: pcntlExtension: pcreExtension: pdo (core)Extension: pdo_sqliteExtension: pgsqlExtension: pharExtension: posixExtension: randomExtension: readlineExtension: reflectionExtension: sessionExtension: shmopExtension: simplexmlExtension: snmpExtension: soapExtension: socketsExtension: sodiumExtension: splExtension: sqlite3Extension: standardExtension: sysvmsgExtension: sysvsemExtension: sysvshmExtension: tidyExtension: tokenizerExtension: uriExtension: xmlExtension: xmlreaderExtension: xmlwriterExtension: zend_testExtension: zipExtension: zlibSAPI: cli
  Unread
  php/php-src#22799·NickSdot opened Jul 18, 2026 · Updated Sep 20, 2026·Draft
  37

• ext/openssl: allow constructing a public-only RSA key

  Extension: openssl
  Unread
  php/php-src#22703·JanTvrdik opened Jul 12, 2026 · Updated Jul 12, 2026
  3

• Allow constructing a public-only RSA key with openssl_pkey_new()

  Extension: opensslFeatureStatus: Verified
  php/php-src#22702 · Filter by author JanTvrdik opened on Jul 12, 2026