LibreSSL in 7.2+ causes issues with openssl_pkey_new

[csandanov]

I've noticed that 7.2 fpm/alpine image still uses openssl (instead of libressl). What are the reasons behind that decision?

I could not find any information in official php.net sources about compatibility with libressl but I know there are a few issues like the one I've found recently. Also, I've noticed that guys from alpine use openssl together with libressl-dev for their php package (see APKBUILD).

// Alpine's announcement about switch to libressl

[tianon]

I think calling this particular bit a conscious choice is giving us too much credit. 😇

IMO, if libressl works without any patches to PHP, we ought to switch for 7.2 / Alpine 3.6+, since using openssl often causes dep issues with other packages. 👍

[csandanov]

Ok, so now you have the same problem as I am :) As I mentioned in my first post openssl_pkey_new doesn't work with libressl, I think that's why alpine guys use openssl for runtime and libressl-dev for the build. You can check it by:

php -r '$key = openssl_pkey_new(["private_key_bits" => 1024, "private_key_type" => OPENSSL_KEYTYPE_RSA]); var_dump($key);'

[tianon]

Reopening to track the openssl_pkey_new issue instead.

Does it reproduce on Alpine's PHP package as well, or does theirs work properly?

[csandanov]

Theirs works fine with openssl

[csandanov]

My bad, it actually works fine, you just don't have libressl in your image.

[tianon]

Ohh, we just need to keep libressl installed?

[tianon]

#502