[PurHur]

Summary

• Implement openssl_pkey_new(), openssl_pkey_get_private(), and openssl_pkey_export() in ext/openssl/ using libcrypto FFI (VmOpensslPkeyNative) — php-src reference: ext/openssl/xp.c.
• Register OPENSSL_KEYTYPE_* constants and OpenSSLAsymmetricKey wrapping via VmOpensslObjects::wrapKey().
• Add openssl_pkey_export to BuiltinByRefParams so the PEM out-parameter binds by reference (same pattern as openssl_sign).

Root cause

openssl_pkey_new was a stub throwing LogicException; export/get_private were unregistered. By-ref export arg was missing from BuiltinByRefParams, so $out stayed empty despite a successful export.

Verification

php bin/vm.php test/repro/maintainer_gap_openssl_pkey_lifecycle.php
# ok

vendor/bin/phpunit test/compliance/VMTest.php --filter openssl_pkey_lifecycle
# OK (1 test, 1 assertion)

./script/ci-fast.sh
# exit 0 (inventory + spine sync + VM driver probe)

Closes #6295

Made with Cursor