Stdlib: openssl_pkey_new/openssl_pkey_get_private/openssl_pkey_export — key pair API missing (ext/openssl/xp.c) #6295

Category

stdlib

Problem

#3324 tracks encrypt/decrypt/sign/verify. Asymmetric key lifecycle builtins — generating key pairs, loading PEM private keys, exporting to PEM/DER — are still missing. JWT, TLS client certs, and openssl_sign() workflows need openssl_pkey_new() / openssl_pkey_get_private() / openssl_pkey_export().

function_exists('openssl_pkey_new') → false on VM.

php-src reference

• php/php-src ext/openssl/xp.c — PHP_FUNCTION(openssl_pkey_new), openssl_pkey_get_private, openssl_pkey_get_public, openssl_pkey_export, openssl_pkey_free, openssl_pkey_get_details
• php/php-src ext/openssl/openssl.c — registration

Repro (failure today)

<?php
var_export(function_exists('openssl_pkey_new'));
echo "\n";
$key = openssl_pkey_new(['private_key_bits' => 512, 'private_key_type' => OPENSSL_KEYTYPE_RSA]);
var_export($key !== false);
echo "\n";
if ($key) {
    openssl_pkey_export($key, $pem);
    echo str_contains($pem, 'BEGIN') ? "pem-ok\n" : "pem-fail\n";
    openssl_pkey_free($key);
}

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh
php bin/vm.php repro.php
php repro.php
'

Scope (this repo)

Coordinate with #6228 introspection helpers (openssl_get_md_methods, etc.).

Done when

• Repro: function_exists true; 512-bit RSA keygen + PEM export prints pem-ok
• Invalid PEM to openssl_pkey_get_private → false + OpenSSL error stack like Zend
• ./script/ci-fast.sh --filter openssl_pkey_new green
• php-src-strict: enum operands on string paths must TypeError (follow Stdlib: hash()/hash_hmac()/md5()/sha1()/crc32() — enum case operands must TypeError (ext/hash, ext/standard) #5780 pattern)

Verification

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter openssl_pkey_new'

Links

• Stdlib: ext/openssl — openssl_encrypt/decrypt/sign/verify (ext/openssl parity) #3324 openssl encrypt/sign · Stdlib: openssl_get_cipher_methods()/openssl_get_md_methods()/openssl_cipher_iv_length()/openssl_digest() — introspection missing (ext/openssl, phase 1) #6228 introspection · Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492