Stdlib: openssl_pkey_get_public() JIT/AOT happy-path leftover of #33499 — PEM/key → OpenSSLAsymmetricKey (ext/openssl/openssl.c) #34038

Category

bug · AOT unimplemented · php-src-strict · leftover of #33499 / #20240

Problem

#33499 baked catchable argc/TypeError paths for openssl_pkey_get_public(), but the happy path still throws at compile time (LogicException) or, after chaining openssl_pkey_get_details()['key'], rejects the value-box PEM as mixed at runtime.

Thin AOT cannot load a public key from PEM / OpenSSLAsymmetricKey produced by openssl_pkey_new() + openssl_pkey_get_details() (#34030), which blocks real TLS/crypto programs.

./script/aot-smoke.sh is 8/8 — feature gap, not the linker.

php-src reference

• php/php-src ext/openssl/openssl.c — PHP_FUNCTION(openssl_pkey_get_public)
• php/php-src ext/openssl/openssl.stub.php — openssl_pkey_get_public(OpenSSLAsymmetricKey|OpenSSLCertificate|array|string $public_key): OpenSSLAsymmetricKey|false

PHP implementation target

• ext/openssl/openssl_pkey_get_public.php — accept value-box/unknown (peer Stdlib: openssl_pkey_get_details() JIT/AOT happy-path leftover of #33496 — details array AOT (ext/openssl/openssl.c) #34030); replace LogicException with NestedJIT / thin AOT
• Reuse __phpc_ossl_pkey_details_pub leaf from JitOpensslPkeyGetDetailsKernel (Stdlib: openssl_pkey_get_details() JIT/AOT happy-path leftover of #33496 — details array AOT (ext/openssl/openssl.c) #34030) to normalize PEM → public PEM, wrap OpenSSLAsymmetricKey (__osslPem)
• Alias openssl_get_publickey should share the path
• Prefer PHP-in-PHP — no new runtime/*.c

Repro

./script/docker-exec.sh -- bash -lc 'printf "%s\n" "<?php" "\$d=openssl_pkey_get_details(openssl_pkey_new([\"private_key_bits\"=>512]));" "\$p=openssl_pkey_get_public(\$d[\"key\"]);" "echo is_object(\$p)?\"ok\":\"fail\", PHP_EOL;" > /tmp/gp.php; php bin/vm.php /tmp/gp.php; PHP_COMPILER_HELPER_RUNTIME_O=0 php bin/compile.php -o /tmp/gp.bin /tmp/gp.php && /tmp/gp.bin'

Done when

• AOT openssl_pkey_get_public(openssl_pkey_get_details(openssl_pkey_new())['key']) returns object (rc=0)
• AOT from OpenSSLAsymmetricKey object also works
• ./script/aot-smoke.sh stays 8/8
• Repro under test/repro/

Parent

• Leftover of Stdlib: openssl_pkey_get_public() JIT leftover of #20240 — AOT LogicException (ext/openssl/openssl.c) #33499 (argc/TypeError only)
• Follows Stdlib: openssl_pkey_get_details() JIT/AOT happy-path leftover of #33496 — details array AOT (ext/openssl/openssl.c) #34030 (openssl_pkey_get_details happy-path) / Stdlib: openssl_pkey_new() JIT/AOT happy-path leftover of #33530 — OpenSSLAsymmetricKey object AOT (ext/openssl/openssl.c) #34015 (openssl_pkey_new)