#40210 [NEW]: SOAP client crash when parse WSDL file located on a SSL/TLS apache server

[maboiteaspam at gmail dot com]

From: maboiteaspam at gmail dot com
Operating system: Solaris 8
PHP version: 5.2.0
PHP Bug Type: SOAP related
Bug description: SOAP client crash when parse WSDL file located on a SSL/TLS apache server

Description:
------------
The built-in SOAP client for PHP 5.2 crashs (SegFault) when trying to
parse a WSDL file located on a secure Apache server configuring to support
client authentication via X.509v3 certificates.
The same WSDL works fine on an identical build on a Linux and Solaris
server with HTTP and HTTPS connections without strong client
authentification.

But when the web server is configuring to be limited only to the web
browsers that present a valid certificate, PHP SOAP SSL connection crashs.

Reproduce code:
---------------
Here is a working example:
---
$soapClient = new SoapClient(
"https://monserveur/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

The same example but we enable client authentication in the Apache's web
server:
---
$soapClient = new SoapClient(
"https://monserveur/wservices/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

To enable the use of client certificates, we need to add the following
directives to httpd.conf:

<Location /www/wservices>
SSLVerifyClient require
SSLVerifyDepth 5
SSLCACertificateFile /opt/apache/conf/ssl/ca.pem
SSLOptions +FakeBasicAuth
SSLRequireSSL
</Location>



--
Edit bug report at [url]http://bugs.php.net/?id=40210&edit=1[/url]
--
Try a CVS snapshot (PHP 4.4): [url]http://bugs.php.net/fix.php?id=40210&r=trysnapshot44[/url]
Try a CVS snapshot (PHP 5.2): [url]http://bugs.php.net/fix.php?id=40210&r=trysnapshot52[/url]
Try a CVS snapshot (PHP 6.0): [url]http://bugs.php.net/fix.php?id=40210&r=trysnapshot60[/url]
Fixed in CVS: [url]http://bugs.php.net/fix.php?id=40210&r=fixedcvs[/url]
Fixed in release: [url]http://bugs.php.net/fix.php?id=40210&r=alreadyfixed[/url]
Need backtrace: [url]http://bugs.php.net/fix.php?id=40210&r=needtrace[/url]
Need Reproduce Script: [url]http://bugs.php.net/fix.php?id=40210&r=needscript[/url]
Try newer version: [url]http://bugs.php.net/fix.php?id=40210&r=oldversion[/url]
Not developer issue: [url]http://bugs.php.net/fix.php?id=40210&r=support[/url]
Expected behavior: [url]http://bugs.php.net/fix.php?id=40210&r=notwrong[/url]
Not enough info: [url]http://bugs.php.net/fix.php?id=40210&r=notenoughinfo[/url]
Submitted twice: [url]http://bugs.php.net/fix.php?id=40210&r=submittedtwice[/url]
register_globals: [url]http://bugs.php.net/fix.php?id=40210&r=globals[/url]
PHP 3 support discontinued: [url]http://bugs.php.net/fix.php?id=40210&r=php3[/url]
Daylight Savings: [url]http://bugs.php.net/fix.php?id=40210&r=dst[/url]
IIS Stability: [url]http://bugs.php.net/fix.php?id=40210&r=isapi[/url]
Install GNU Sed: [url]http://bugs.php.net/fix.php?id=40210&r=gnused[/url]
Floating point limitations: [url]http://bugs.php.net/fix.php?id=40210&r=float[/url]
No Zend Extensions: [url]http://bugs.php.net/fix.php?id=40210&r=nozend[/url]
MySQL Configuration Error: [url]http://bugs.php.net/fix.php?id=40210&r=mysqlcfg[/url]

[tony2001@php.net]

ID: 40210
Updated by: [email]tony2001@php.net[/email]
Reported By: maboiteaspam at gmail dot com
-Status: Open
+Status: Feedback
Bug Type: SOAP related
Operating System: Solaris 8
PHP Version: 5.2.0
New Comment:

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]




Previous Comments:
------------------------------------------------------------------------

[2007-01-23 13:57:07] maboiteaspam at gmail dot com

Description:
------------
The built-in SOAP client for PHP 5.2 crashs (SegFault) when trying to
parse a WSDL file located on a secure Apache server configuring to
support client authentication via X.509v3 certificates.
The same WSDL works fine on an identical build on a Linux and Solaris
server with HTTP and HTTPS connections without strong client
authentification.

But when the web server is configuring to be limited only to the web
browsers that present a valid certificate, PHP SOAP SSL connection
crashs.

Reproduce code:
---------------
Here is a working example:
---
$soapClient = new SoapClient(
"https://monserveur/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

The same example but we enable client authentication in the Apache's
web server:
---
$soapClient = new SoapClient(
"https://monserveur/wservices/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

To enable the use of client certificates, we need to add the following
directives to httpd.conf:

<Location /www/wservices>
SSLVerifyClient require
SSLVerifyDepth 5
SSLCACertificateFile /opt/apache/conf/ssl/ca.pem
SSLOptions +FakeBasicAuth
SSLRequireSSL
</Location>




------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=40210&edit=1[/url]

[maboiteaspam at gmail dot com]

ID: 40210
User updated by: maboiteaspam at gmail dot com
Reported By: maboiteaspam at gmail dot com
-Status: Feedback
+Status: Closed
Bug Type: SOAP related
Operating System: Solaris 8
PHP Version: 5.2.0
New Comment:

The last version solved this problem thanks a lot !


Previous Comments:
------------------------------------------------------------------------

[2007-01-23 14:13:56] [email]tony2001@php.net[/email]

Please try using this CVS snapshot:

[url]http://snaps.php.net/php5.2-latest.tar.gz[/url]

For Windows:

[url]http://snaps.php.net/win32/php5.2-win32-latest.zip[/url]



------------------------------------------------------------------------

[2007-01-23 13:57:07] maboiteaspam at gmail dot com

Description:
------------
The built-in SOAP client for PHP 5.2 crashs (SegFault) when trying to
parse a WSDL file located on a secure Apache server configuring to
support client authentication via X.509v3 certificates.
The same WSDL works fine on an identical build on a Linux and Solaris
server with HTTP and HTTPS connections without strong client
authentification.

But when the web server is configuring to be limited only to the web
browsers that present a valid certificate, PHP SOAP SSL connection
crashs.

Reproduce code:
---------------
Here is a working example:
---
$soapClient = new SoapClient(
"https://monserveur/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

The same example but we enable client authentication in the Apache's
web server:
---
$soapClient = new SoapClient(
"https://monserveur/wservices/generate_wsdl.php",
array( 'local_cert'=> "asg-newCert.crt" ) );

To enable the use of client certificates, we need to add the following
directives to httpd.conf:

<Location /www/wservices>
SSLVerifyClient require
SSLVerifyDepth 5
SSLCACertificateFile /opt/apache/conf/ssl/ca.pem
SSLOptions +FakeBasicAuth
SSLRequireSSL
</Location>




------------------------------------------------------------------------


--
Edit this bug report at [url]http://bugs.php.net/?id=40210&edit=1[/url]