PHP openssl_pkcs12_read "error:0308010C:digital envelope routines::unsupported"

Question

I'm getting this error after upgrading from php5.6 to php8.2 on windows. Looks like the new openssl dll does not support splitting of my apple push notification certificate pk12 file into separate cert and key array. Any ideas how to get it to do that ? There is another similar question on stackoverflow but it only discusses ubuntu, not windows. I tried to ask a question to the contributors of the ubuntu related article but i had insufficient permissions.

$p12_filename = "..\\path\\to\\pass.com.testpass.p12";
$p12data = file_get_contents($p12_filename);
$p12Password = 'MyPassword';
$rp12 = array();
// following function works in php5.6 but fails in php8.2
$rc = openssl_pkcs12_read($p12data, $rp12, $p12Password);
$cert_data = $rp12['cert'];
$cert_key = $rp12['pkey'];

@Maarten Bodewes - code sample now added although google can't seem to find the other stackoverflow question anymore. — Barny
– Barny, Commented Jan 2, 2023 at 10:19
@Jacob Mulquin - thanks for the link and it looks like the best workaround. However i am not keen on adding further steps to the server setup process so will investigate the previous version of PHP 8.1.13. — Barny
– Barny, Commented Jan 2, 2023 at 10:21
@Jacob Mulquin - have replaced PHP8.2 with PHP8.1.13 and the certificate extraction now works as intended. however it still generates a warning which would be good to resolve => error:0607A082:digital envelope routines:EVP_CIPHER_CTX_set_key_length:invalid key length. — Barny
– Barny, Commented Jan 2, 2023 at 10:44
Good to hear you got it working in some capacity. I'm not too experienced with this kind of stuff so unable to help you further. — Jacob Mulquin
– Jacob Mulquin, Commented Jan 2, 2023 at 10:47

Barny · Accepted Answer · 2023-01-02 18:03:05Z

2

So according to the link above supplied by Jacob Mulquin , the openssl component supplied in PHP8.2 has a legacy function removed which prevents it from parsing certain types of certificate that were previously supported. As i don't need the latest language enhancements of PHP8.2, the quickest solution for me ( on windows ) was to replace PHP8.2 with the next most recent release, PHP8.1.13.

edited Jan 2, 2023 at 18:03

answered Jan 2, 2023 at 10:48

Barny

1511 silver badge15 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Mahdi Azadbar · Accepted Answer · 2023-06-27 10:52:03Z

0

you can use openssl command for pre extrack and use certificate in php.

openssl pkcs12 -in key.p12 -legacy -out Behsazan.crt -node

answered Jun 27, 2023 at 10:52

Mahdi Azadbar

1,3504 gold badges17 silver badges24 bronze badges

Collectives™ on Stack Overflow

PHP openssl_pkcs12_read "error:0308010C:digital envelope routines::unsupported"

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related