default_bits=1024 causes test failure with OpenSSL 3.2+

Assessment

Research direction

Description

Description

ext/openssl/tests/gh10495.phpt test fails on systems with OpenSSL 3.2+ if the default openssl.cnf is not provided.

This is caused by the default_bits=1024 setting in ext/openssl/tests/CertificateGenerator.inc.
OpenSSL starting from 3.2 requires 2048-bit keys on the default security level 2 (https://docs.openssl.org/3.2/man3/SSL_CTX_set_security_level/#description).

PHP Version

PHP 8.4.13

Operating System

WSL with Arch Linux

Contributor guide

Open the contributing guide

First steps

1. Read the whole issue, then the project's contributing guide.
2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
3. Fork the repository and make your change on a branch.
4. Open a pull request that references the issue number.

More from php/php-src

• Built-in server leaks a file descriptor on every HEAD request for a static file Open
  Bug SAPI: cli_server Status: Verified

  Difficulty 2/5 1-3 hours Newbie friendliness 88/100

  php/php-src#23764 · Opened Sep 19, 2026

• PDO_Firebird returns null for non-null empty BLOBs Open
  Bug Status: Needs Triage

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  php/php-src#23758 · Opened Sep 18, 2026

• sapi_lsapi_ub_write does not return bytes written in lsapi mode Open
  Bug Status: Needs Triage

  Difficulty 1/5 Under an hour Newbie friendliness 90/100

  php/php-src#23424 · Opened Aug 23, 2026

• php_embed_ub_write does not return on error Open
  Bug Status: Needs Triage

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  php/php-src#23423 · Opened Aug 23, 2026

• Flaky hrtime.phpt test Open
  Bug Category: Tests Status: Verified

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  php/php-src#22508 · Opened Jun 29, 2026

All issues in php/php-src

Similar issues

• ares_parse_a_reply/aaaa_reply: negative *naddrttls writes past addrttls since 1.21.0 Open

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  c-ares/c-ares#1300 · Opened Sep 21, 2026

• wm_gcp_parse_output underflows its heap buffer by one byte Open
  level/task module/gcp type/bug

  Difficulty 2/5 1-3 hours Newbie friendliness 85/100

  wazuh/wazuh#39525 · Opened Sep 21, 2026

• Build failure with newer clang Open

  Difficulty 1/5 Under an hour Newbie friendliness 86/100

  hapostgres/pg_auto_failover#1190 · Opened Sep 21, 2026

• Use name macOS not darwin in release table Open
  docs

  Difficulty 1/5 Under an hour Newbie friendliness 85/100

  visit-dav/visit#21164 · Opened Sep 21, 2026

• [copp] test_copp.py missing BGPv6 test coverage Open
  P3 sonic-vpp

  Difficulty 2/5 1-3 hours Newbie friendliness 88/100

  sonic-net/sonic-buildimage#29662 · Opened Sep 21, 2026

More C issues