[php-maint] Bug#780771: php5-curl: libcurl no more sends client certificate during mutual TLS authentication

Patrick Sauer ps at binsec.de
Thu Mar 19 13:19:52 UTC 2015


Hi,

we have the same problem here. After investigating with strace we think 
that the file read of the tls client certificate and key are missing.

Behaviour Now (5.4.38-0+deb7u1):

sudo strace -f php test.php 2>&1 | grep client
open("/usr/lib/x86_64-linux-gnu/libmysqlclient.so.18", O_RDONLY) = 3

Behaviour Before (5.4.36-0+deb7u3):

sudo strace -f php test.php 2>&1 | grep client
open("/usr/lib/x86_64-linux-gnu/libmysqlclient.so.18", O_RDONLY) = 3
open("/etc/xxxxx/sslclients/xxx-client.crt", O_RDONLY) = 4
open("/etc/xxxxx/sslclients/xxx-client.key", O_RDONLY) = 4

I took a look at the php5 package changes using git, but can't see anything.

Regards,
Patrick



More information about the pkg-php-maint mailing list