[PurHur]

Summary

• Closes Stdlib: openssl_pkey_export()/openssl_pkey_export_to_file() JIT leftover of #6295/#20287 — AOT LogicException (ext/openssl/xp.c) #32705 — leftover of Stdlib: openssl_pkey_new/openssl_pkey_get_private/openssl_pkey_export — key pair API missing (ext/openssl/xp.c) #6295 / Stdlib: openssl_pkey_export_to_file() missing after openssl_pkey_export (ext/openssl/openssl.c) #20287: openssl_pkey_export() / openssl_pkey_export_to_file() VM-only LogicException on JIT/AOT.
• Bake VmOpensslPkeyNative::exportPrivateKeyPem() in the compiler process (libcrypto FFI), write by-ref $output / __compiler_file_put_contents — same pattern as Stdlib: openssl_csr_export()/openssl_csr_export_to_file() JIT leftover of #6421 — AOT LogicException (ext/openssl/xp.c) #32697 CSR export.
• php-src: ext/openssl/openssl.c PHP_FUNCTION(openssl_pkey_export) / PEM_write_bio_PrivateKey. No new lib/AOT/runtime/*.c.

Test plan

• ./script/docker-exec.sh -- bash -lc './script/aot-smoke.sh' → 8 passed, 0 failed
• ./script/phpunit.sh --filter 'OpensslPkeyExportAotTest|OpensslPkeyExportToFileAotTest|OpensslX509RuntimeShrinkTest' → OK (8 tests, 47 assertions) including @group llvm AOT bins matching VM true|pem-ok|false / true|file-ok|false

Not covered: north-star5-verify --strict, full make test-harness, OpenSSLAsymmetricKey object keys (still VM-only; literal PEM only).

Made with Cursor