Stdlib: OpenSSLCertificate / OpenSSLAsymmetricKey / OpenSSLCertificateSigningRequest — PHP 8.4 ext/openssl resource→object missing (openssl.stub.php) #7268

Category

stdlib

Problem

PHP 8.4 migrated ext/openssl resources to OpenSSLCertificate, OpenSSLAsymmetricKey, and OpenSSLCertificateSigningRequest objects (php-src ext/openssl/openssl.stub.php). This compiler has partial openssl stubs (#3324) but class_exists() is false for all three types; openssl_x509_read() and key APIs cannot match Zend signatures or instanceof checks.

php-src reference

• php/php-src ext/openssl/openssl.stub.php — object declarations
• php/php-src ext/openssl/xp.c — PHP_FUNCTION(openssl_x509_read), key export
• php/php-src ext/openssl/openssl.c — object handlers

Repro (failure today)

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php -r "
foreach ([\"OpenSSLCertificate\", \"OpenSSLAsymmetricKey\", \"OpenSSLCertificateSigningRequest\"] as \$c) {
    echo \$c, \": \", class_exists(\$c, false) ? \"yes\" : \"no\", PHP_EOL;
}
"'
# all no

<?php
$pem = "-----BEGIN CERTIFICATE-----\nMIIB…\n-----END CERTIFICATE-----\n"; // minimal harness PEM
$cert = openssl_x509_read($pem); // undefined today (#6274)
var_export($cert instanceof OpenSSLCertificate);

Scope (this repo)

PHP-in-PHP: object handlers in ext/openssl/; OpenSSL FFI stays thin.

php-src-strict: passing a backed enum case where Zend expects OpenSSLCertificate must TypeError.

Done when

• All three classes exist on VM (class_exists true, is_subclass_of(..., false) false — final internal classes)
• openssl_x509_read() returns OpenSSLCertificate (pairs Stdlib: openssl_x509_read()/openssl_x509_parse() — X.509 PEM/DER introspection missing (ext/openssl/xp.c) #6274)
• openssl_free_key() deprecated alias behavior documented / noop like Zend 8.4

Verification

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter OpenSslObjectTypes'

Related

• Stdlib: ext/openssl — openssl_encrypt/decrypt/sign/verify (ext/openssl parity) #3324 openssl epic · Stdlib: openssl_x509_read()/openssl_x509_parse() — X.509 PEM/DER introspection missing (ext/openssl/xp.c) #6274 x509 read · Stdlib: openssl_pkey_new/openssl_pkey_get_private/openssl_pkey_export — key pair API missing (ext/openssl/xp.c) #6295 pkey API · Stdlib: Resource builtin class — PHP 8.4 resource object model missing (Zend/zend_types.h) #7071 Resource model · Epic: Self-host critical path — compiler compiles itself (M3→M5) #1492