Repository navigation
Stdlib: openssl_pkey_export_to_file() missing after openssl_pkey_export (ext/openssl/openssl.c) #20287
Description
Category
stdlib · php-src-strict · ext/openssl key PEM file export (extends #6295)
Problem
openssl_pkey_export() writes PEM to a by-ref string, but Zend’s openssl_pkey_export_to_file() is not registered — apps that persist keys to disk (common deploy/bootstrap pattern) hit a fatal.
| Repro | Zend 8.2+ | VM (2026-07-17) |
|---|---|---|
function_exists('openssl_pkey_export_to_file') |
true |
false |
openssl_pkey_export_to_file($key, $path) |
true + PEM file |
fatal undefined function |
php-src reference
- php/php-src
ext/openssl/openssl.stub.php—openssl_pkey_export_to_file - php/php-src
ext/openssl/openssl.c—PHP_FUNCTION(openssl_pkey_export_to_file)
PHP implementation target
ext/openssl/openssl_pkey_export_to_file.phpInternal — thin wrapper over existingVmOpenssl::pkeyExport/ PEM path from Stdlib: openssl_pkey_new/openssl_pkey_get_private/openssl_pkey_export — key pair API missing (ext/openssl/xp.c) #6295 +file_put_contentssemantics matching Zend (permissions/warnings)- Register in
ext/openssl/Module.php - PHP-in-PHP; no new C beyond existing pkey native helpers
Repro
./script/docker-exec.sh -- bash -lc 'php bin/vm.php -r "var_export(function_exists(\"openssl_pkey_export_to_file\")); echo PHP_EOL;"'Expected: true. Today: false.
Zend smoke: openssl_pkey_new → openssl_pkey_export_to_file($key, '/tmp/k.pem') → file starts with -----BEGIN.
Done when (php-src-strict)
- Function registered; writes PEM matching
openssl_pkey_exportcontent - Failure paths (unwritable path) match Zend bool + warning
- Optional passphrase arg parity with stub
- Compliance
.phptundertest/compliance/cases/ - php-src-strict; no php-compiler-strict shortcut
Related
- Stdlib: openssl_pkey_new/openssl_pkey_get_private/openssl_pkey_export — key pair API missing (ext/openssl/xp.c) #6295 (pkey_export) · Stdlib: openssl_pkey_free() missing after openssl_free_key baseline (ext/openssl/openssl.c) #20271 (pkey_free) · Stdlib: openssl_x509_export()/openssl_x509_export_to_file() missing (ext/openssl/openssl.c) #20273 (x509_export_to_file sibling)
Activity
PurHur commentedon Jul 18, 2026
claim: PHP Compiler Ext — I/O & Crypto — starting this run
Trust probe (before implement):
docker infoOK; vendor presentmake bootstrap-selfhost-link→ OK (/compiler/build/selfhost)php script/bootstrap-inventory.php --check→ red (doc drift onext/standard/JitGmmktime.php/JitMktime.phpclass method counts — unrelated to openssl; master doc lag)./script/release-readiness.sh --json— still running; will noteuser_release_readywhen finishedImplementing
openssl_pkey_export_to_file(#20287) toward php-src-strict.Add openssl_pkey_export_to_file for php-src-strict PEM export (#20287).
Add openssl_pkey_export_to_file for php-src-strict PEM export (#20287)…
PurHur commentedon Jul 18, 2026
merged via #20329
Verification
php bin/vm.php -r 'var_export(function_exists("openssl_pkey_export_to_file"));'→truephp bin/vm.php test/repro/openssl_pkey_export_to_file_20287.php→ok(plain PEM match + passphrase encrypt/load)vendor/bin/phpunit --filter openssl_pkey_export_to_file→ OK (2)north-star5-verify-fastOK after rebasephp-src-strict:
ext/openssl/openssl_pkey_export_to_file.php+ passphrase write viaVmOpensslPkeyNative::writePrivateKeyPem(3DES).