Skip to content

Commit 14dabf8

Browse files
morrisonleviclaude
morrisonlevi
and
claude
authored
ci: xfail sni_server tests due to expired certificates (#3777)
* ci: xfail sni_server tests due to expired certificates The bundled sni_server_*.pem certificates expired on 2026-04-02, causing stream_socket_client() to return false and the tests to fail across all PHP versions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * ci: xfail bug74796 and fix README for expired openssl certs Add bug74796.phpt to 8.3-8.5 xfail lists (same expired cert root cause as sni_server tests). Also update README to include it and drop inaccurate wording. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 42c7c25 commit 14dabf8

File tree

10 files changed

+27
-0
lines changed

10 files changed

+27
-0
lines changed

‎dockerfiles/ci/xfail_tests/7.2.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,8 @@ ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
171171
ext/openssl/tests/openssl_x509_parse_basic.phpt
172172
ext/openssl/tests/peer_verification.phpt
173173
ext/openssl/tests/san_peer_matching.phpt
174+
ext/openssl/tests/sni_server.phpt
175+
ext/openssl/tests/sni_server_key_cert.phpt
174176
ext/openssl/tests/session_meta_capture.phpt
175177
ext/openssl/tests/stream_crypto_flags_001.phpt
176178
ext/openssl/tests/stream_crypto_flags_002.phpt

‎dockerfiles/ci/xfail_tests/7.3.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,6 +182,8 @@ ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
182182
ext/openssl/tests/openssl_x509_parse_basic.phpt
183183
ext/openssl/tests/peer_verification.phpt
184184
ext/openssl/tests/san_peer_matching.phpt
185+
ext/openssl/tests/sni_server.phpt
186+
ext/openssl/tests/sni_server_key_cert.phpt
185187
ext/openssl/tests/session_meta_capture.phpt
186188
ext/openssl/tests/stream_crypto_flags_001.phpt
187189
ext/openssl/tests/stream_crypto_flags_002.phpt

‎dockerfiles/ci/xfail_tests/7.4.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -223,6 +223,8 @@ ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
223223
ext/openssl/tests/openssl_x509_parse_basic.phpt
224224
ext/openssl/tests/peer_verification.phpt
225225
ext/openssl/tests/san_peer_matching.phpt
226+
ext/openssl/tests/sni_server.phpt
227+
ext/openssl/tests/sni_server_key_cert.phpt
226228
ext/openssl/tests/session_meta_capture.phpt
227229
ext/openssl/tests/session_meta_capture_tlsv13.phpt
228230
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.0.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -266,6 +266,8 @@ ext/openssl/tests/openssl_x509_free_basic.phpt
266266
ext/openssl/tests/openssl_x509_parse_basic.phpt
267267
ext/openssl/tests/peer_verification.phpt
268268
ext/openssl/tests/san_peer_matching.phpt
269+
ext/openssl/tests/sni_server.phpt
270+
ext/openssl/tests/sni_server_key_cert.phpt
269271
ext/openssl/tests/session_meta_capture.phpt
270272
ext/openssl/tests/session_meta_capture_tlsv13.phpt
271273
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.1.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,8 @@ ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
8787
ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
8888
ext/openssl/tests/peer_verification.phpt
8989
ext/openssl/tests/san_peer_matching.phpt
90+
ext/openssl/tests/sni_server.phpt
91+
ext/openssl/tests/sni_server_key_cert.phpt
9092
ext/openssl/tests/session_meta_capture.phpt
9193
ext/openssl/tests/session_meta_capture_tlsv13.phpt
9294
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.2.list‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,8 @@ ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
7777
ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
7878
ext/openssl/tests/peer_verification.phpt
7979
ext/openssl/tests/san_peer_matching.phpt
80+
ext/openssl/tests/sni_server.phpt
81+
ext/openssl/tests/sni_server_key_cert.phpt
8082
ext/openssl/tests/session_meta_capture.phpt
8183
ext/openssl/tests/session_meta_capture_tlsv13.phpt
8284
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.3.list‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,9 @@ ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
7575
ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
7676
ext/openssl/tests/peer_verification.phpt
7777
ext/openssl/tests/san_peer_matching.phpt
78+
ext/openssl/tests/sni_server.phpt
79+
ext/openssl/tests/sni_server_key_cert.phpt
80+
ext/openssl/tests/bug74796.phpt
7881
ext/openssl/tests/session_meta_capture.phpt
7982
ext/openssl/tests/session_meta_capture_tlsv13.phpt
8083
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.4.list‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,9 @@ ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
7878
ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
7979
ext/openssl/tests/peer_verification.phpt
8080
ext/openssl/tests/san_peer_matching.phpt
81+
ext/openssl/tests/sni_server.phpt
82+
ext/openssl/tests/sni_server_key_cert.phpt
83+
ext/openssl/tests/bug74796.phpt
8184
ext/openssl/tests/session_meta_capture.phpt
8285
ext/openssl/tests/session_meta_capture_tlsv13.phpt
8386
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/8.5.list‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,9 @@ ext/openssl/tests/openssl_peer_fingerprint_basic.phpt
7979
ext/openssl/tests/openssl_x509_checkpurpose_basic.phpt
8080
ext/openssl/tests/peer_verification.phpt
8181
ext/openssl/tests/san_peer_matching.phpt
82+
ext/openssl/tests/sni_server.phpt
83+
ext/openssl/tests/sni_server_key_cert.phpt
84+
ext/openssl/tests/bug74796.phpt
8285
ext/openssl/tests/session_meta_capture.phpt
8386
ext/openssl/tests/session_meta_capture_tlsv13.phpt
8487
ext/openssl/tests/stream_crypto_flags_001.phpt

‎dockerfiles/ci/xfail_tests/README.md‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -242,3 +242,9 @@ Disabled on versions: `8.1+`.
242242

243243
This test checks PHP's handling of excessively large QName prefix in SoapVar (a stress test for edge cases). With ddtrace loaded, the additional memory overhead causes the test to be killed before it can complete, due to hitting memory limits during the stress test.
244244

245+
## `ext/openssl/tests/sni_server.phpt`, `ext/openssl/tests/sni_server_key_cert.phpt`, `ext/openssl/tests/bug74796.phpt`
246+
247+
Disabled on all versions (where present).
248+
249+
The bundled test certificates expired on 2026-04-02. The TLS handshake fails because the client rejects the expired server certificates, causing `stream_socket_client` to return `false`.
250+

0 commit comments

Comments
 (0)