[PurHur]

Summary

• Register PHP 8.4 OpenSSLCertificate, OpenSSLAsymmetricKey, and OpenSSLCertificateSigningRequest internal classes in ext/openssl/BuiltinClasses.php (php-src ext/openssl/openssl.stub.php).
• Implement openssl_x509_read() returning OpenSSLCertificate objects backed by PEM material via host OpenSSL validation (ext/openssl/xp.c).
• Add deprecated openssl_free_key() noop matching Zend 8.4 behavior.

Closes #7268

php-src reference

• ext/openssl/openssl.stub.php — object declarations
• ext/openssl/xp.c — openssl_x509_read, openssl_free_key

PHP implementation

• ext/openssl/VmOpensslObjects.php — class registration + cert lifecycle
• ext/openssl/openssl_x509_read.php, ext/openssl/openssl_free_key.php

Verification

Issue repro:

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php -r "
foreach ([\"OpenSSLCertificate\", \"OpenSSLAsymmetricKey\", \"OpenSSLCertificateSigningRequest\"] as \$c) {
    echo \$c, \": \", class_exists(\$c, false) ? \"yes\" : \"no\", PHP_EOL;
}
"'

Output:

OpenSSLCertificate: yes
OpenSSLAsymmetricKey: yes
OpenSSLCertificateSigningRequest: yes

Targeted tests:

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && vendor/bin/phpunit --filter OpenSslObjectTypes'

Output:

OK (4 tests, 12 assertions)

Made with Cursor