Comment 73 for bug 965371

Revision history for this message
JDS (jsilveronnelly) wrote :

@bradley-will: I appreciate the helpful suggestion, but the PHP libs I am interested in are not in any way related to SOAP or PHP's implementation of SoapClient.

The thing I'm interested in is LDAP. There is a chain of libraries that PHP uses to get LDAPS working.

 PHP -> uses OpenLDAP -> which uses GnuTLS (On Ubuntu)

In the past, I tried recompiling OpenLDAP against OpenSSL, and this fixed PHP, so I know that the chain I described is correct (well, is correct for Ubuntu 10.04. I'm assuming it is true for 12.04 as well)

In any case, when OpenLDAP is recompiled against OpenSSL, the chain of libs I'm interested in is:

 PHP -> uses OpenLDAP -> which uses OpenSSL

Is there a system-wide configuration way to force PHP's LDAP libs to use TLSv1.0? So far I have not found an answer.

Finally, is there a way to get GnuTLS to work against the above described SSL services? GnuTLS has similar problems connecting to SSL services as described in this bug for OpenSSL. Is there a bug open for GnuTLS somewhere about this?

Thanks