Stdlib: openssl_x509_check_private_key() JIT/AOT lowering missing — VM path only (ext/openssl/openssl.c) #32527

Category

Stdlib · JIT/AOT leftover of #20285 (ext/openssl/openssl.c openssl_x509_check_private_key)

Problem

VM path is green (#20285). JIT/AOT still throws:

openssl_x509_check_private_key() is not implemented for JIT in this compiler build (issue #20285)

docs/capabilities.md advertises yes / no / no. Peer leftover: openssl_x509_fingerprint() bake (#32512 leftover of #6524). #32522 owns openssl_x509_checkpurpose().

Thin-standalone AOT has no PHP FFI, so NestedJIT of VmOpensslX509Native cannot call X509_check_private_key. Bake from compile-time PEM literals in the compiler process (same as parse/fingerprint).

php-src reference

• php/php-src ext/openssl/openssl.c — PHP_FUNCTION(openssl_x509_check_private_key) / X509_check_private_key
• php/php-src ext/openssl/openssl.stub.php — certificate, private_key

PHP implementation target

• ext/openssl/JitOpensslX509.php — bake VmOpensslX509Native::checkPrivateKeyPem from compile-time string PEMs
• ext/openssl/openssl_x509_check_private_key.php call() — ACE then JitOpensslX509::checkPrivateKey
• no new runtime/*.c

Repro

./script/aot-smoke.sh
./script/docker-exec.sh -- bash -lc 'php bin/vm.php test/repro/openssl_x509_check_private_key_20285.php'
./script/docker-exec.sh -- bash -lc 'php bin/compile.php -o /tmp/ck.bin test/repro/issue_openssl_x509_check_private_key_aot.php && /tmp/ck.bin'

Done when

• AOT matching PEM pair is true; mismatched / invalid is false
• VM still matches Zend
• capability matrix JIT/AOT yes; no new runtime/*.c
• targeted phpunit filter green; aot-smoke stays 8/8