Skip to content

Regenerate the expired ext/ftp/tests/cert.pem#22873

Merged
NattyNarwhal merged 1 commit into
php:PHP-8.2from
iliaal:fix/ftp-test-cert-refresh
Jul 23, 2026
Merged

Regenerate the expired ext/ftp/tests/cert.pem#22873
NattyNarwhal merged 1 commit into
php:PHP-8.2from
iliaal:fix/ftp-test-cert-refresh

Conversation

@iliaal

@iliaal iliaal commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

The self-signed certificate the FTP test server presents (ext/ftp/tests/cert.pem, loaded by server.inc) was generated in 2016 with a ten-year validity and expired on 2026-07-23 12:37 UTC, so ext/ftp/tests and the ftps:// stream tests (ext/standard/tests/streams/opendir-003 and -004) now fail the TLS handshake with "certificate expired" on every branch. This regenerates it as a self-signed CN=127.0.0.1 certificate that expires 2099-12-31, so the suite does not silently break again on a ten-year cadence.

openssl x509 -in ext/ftp/tests/cert.pem -noout -checkend 0   # was: expired

@iliaal
iliaal force-pushed the fix/ftp-test-cert-refresh branch from 1eb3e15 to 2be339b Compare July 23, 2026 15:34
The self-signed certificate the FTP test server presents
(ext/ftp/tests/server.inc) was generated in 2016 with a ten-year
validity and expired on 2026-07-23, so ext/ftp/tests and the ftps://
stream tests (ext/standard/tests/streams/opendir-003 and -004) fail the
TLS handshake with "certificate expired" on every branch. Regenerate it
as a self-signed CN=127.0.0.1 certificate that expires 2099-12-31, so
the suite does not silently break again on a ten-year cadence.
@LamentXU123

Copy link
Copy Markdown
Member

8.2 is protected. So we might wait for someone in the security team to merge this.

@NattyNarwhal
NattyNarwhal merged commit 011ad34 into php:PHP-8.2 Jul 23, 2026
18 checks passed
NattyNarwhal added a commit that referenced this pull request Jul 23, 2026
* PHP-8.5:
  Regenerate the expired ext/ftp/tests/cert.pem (#22873)
pull Bot pushed a commit to edisplay/php-src that referenced this pull request Jul 23, 2026
* PHP-8.2:
  Regenerate the expired ext/ftp/tests/cert.pem (php#22873)
pull Bot pushed a commit to edisplay/php-src that referenced this pull request Jul 23, 2026
* PHP-8.3:
  Regenerate the expired ext/ftp/tests/cert.pem (php#22873)
pull Bot pushed a commit to edisplay/php-src that referenced this pull request Jul 23, 2026
* PHP-8.4:
  Regenerate the expired ext/ftp/tests/cert.pem (php#22873)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants