[PurHur]

Summary

• Thin AOT still threw LogicException on openssl_x509_read() happy path after Stdlib: openssl_x509_read() JIT leftover of #7268 — AOT LogicException (ext/openssl/openssl.c) #33497 baked TypeError/argc gates.
• Compile-time PEM literals now normalize via VmOpensslX509Native and allocate OpenSSLCertificate with __osslPem (peer #34037 openssl_pkey_get_private); object/value-box args passthrough.

Closes #34048

php-src

• ext/openssl/xp.c — PHP_FUNCTION(openssl_x509_read)
• ext/openssl/openssl.stub.php — final class OpenSSLCertificate

Test plan

• ./script/aot-smoke.sh → 8 passed, 0 failed
• VM + thin AOT test/repro/issue_34048_openssl_x509_read_aot.php → OpenSSLCertificate
• ./script/phpunit.sh --filter Issue34048OpensslX509ReadHappyPathAotTest → OK (3 tests, 13 assertions)
• php script/check-selfhost-spine-coverage-sync.php → OK
• ./script/phpunit.sh --filter BootstrapSelfhostBundleTest::testCompilerLibSpineSmokeBundleUnitCountAndKeyUnits → OK

Verify transcript

aot-smoke: 8 passed, 0 failed
VM/AOT: OpenSSLCertificate
OK (3 tests, 13 assertions)
check-selfhost-spine-coverage-sync: OK
bootstrap-spine-count: 7758/7761

Made with Cursor