From 39cc29e95417288edd319e81f36d37ee45b9ae67 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@remirepo.net>
Date: Tue, 5 Mar 2019 16:01:19 +0100
Subject: add upstream patch for OpenSSL 1.1.1b

---
 failed.txt           |  5 ++---
 php-openssl111.patch | 29 +++++++++++++++++++++++++++++
 php72.spec           |  7 ++++++-
 3 files changed, 37 insertions(+), 4 deletions(-)
 create mode 100644 php-openssl111.patch

diff --git a/failed.txt b/failed.txt
index 4c3e854..5503a8f 100644
--- a/failed.txt
+++ b/failed.txt
@@ -10,12 +10,11 @@ $ grep -r 'Tests failed' /var/lib/mock/{fc,el}*/build.log
 /var/lib/mock/fc27x/build.log:Tests failed    :    0
 /var/lib/mock/fc28i/build.log:Tests failed    :    0
 /var/lib/mock/fc28x/build.log:Tests failed    :    0
-/var/lib/mock/fc29i/build.log:Tests failed    :    2
-/var/lib/mock/fc29x/build.log:Tests failed    :    2
+/var/lib/mock/fc29i/build.log:Tests failed    :    1
+/var/lib/mock/fc29x/build.log:Tests failed    :    1
 
 
 fc29i, fc29x:
-	5	openssl_decrypt() with CCM cipher algorithm tests [ext/openssl/tests/openssl_decrypt_ccm.phpt]
 	5	TLS server rate-limits client-initiated renegotiation [ext/openssl/tests/stream_server_reneg_limit.phpt]
 el8x:
 	5	openssl failure under investigation
diff --git a/php-openssl111.patch b/php-openssl111.patch
new file mode 100644
index 0000000..ea43711
--- /dev/null
+++ b/php-openssl111.patch
@@ -0,0 +1,29 @@
+From 19a44ffb7be91344550fa700830b8e62a73031ba Mon Sep 17 00:00:00 2001
+From: Anatol Belski <ab@php.net>
+Date: Thu, 28 Feb 2019 12:48:47 +0100
+Subject: [PATCH] Sync with behavior change in OpenSSL 1.1.1b
+
+A behavior change in revealed by some openssl_decrypt() based test,
+where an encrypt API is used with a decrypt context. The EVP_Cipher*
+functions will automatically choose the right operation depending on the
+context passed.
+---
+ ext/openssl/openssl.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c
+index 871a30c..7df5072 100644
+--- a/ext/openssl/openssl.c
++++ b/ext/openssl/openssl.c
+@@ -6494,7 +6494,7 @@ static int php_openssl_cipher_update(const EVP_CIPHER *cipher_type,
+ {
+ 	int i = 0;
+ 
+-	if (mode->is_single_run_aead && !EVP_EncryptUpdate(cipher_ctx, NULL, &i, NULL, (int)data_len)) {
++	if (mode->is_single_run_aead && !EVP_CipherUpdate(cipher_ctx, NULL, &i, NULL, (int)data_len)) {
+ 		php_openssl_store_errors();
+ 		php_error_docref(NULL, E_WARNING, "Setting of data length failed");
+ 		return FAILURE;
+-- 
+2.1.4
+
diff --git a/php72.spec b/php72.spec
index f488b75..e0866c8 100644
--- a/php72.spec
+++ b/php72.spec
@@ -124,7 +124,7 @@
 Summary: PHP scripting language for creating dynamic web sites
 Name: php
 Version: %{upver}%{?rcver:~%{rcver}}
-Release: 1%{?dist}
+Release: 2%{?dist}
 # All files licensed under PHP version 3.01, except
 # Zend is licensed under Zend
 # TSRM is licensed under BSD
@@ -184,6 +184,7 @@ Patch49: php-7.2.16-pdooci.patch
 Patch91: php-7.2.0-oci8conf.patch
 
 # Upstream fixes (100+)
+Patch100: php-openssl111.patch
 
 # Security fixes (200+)
 
@@ -1101,6 +1102,7 @@ low-level PHP extension for the libsodium cryptographic library.
 %patch91 -p1 -b .remi-oci8
 
 # upstream patches
+%patch100 -p1 -b .up
 
 # security patches
 
@@ -2179,6 +2181,9 @@ fi
 
 
 %changelog
+* Tue Mar  5 2019 Remi Collet <remi@remirepo.net> - 7.2.16-2
+- add upstream patch for OpenSSL 1.1.1b
+
 * Tue Mar  5 2019 Remi Collet <remi@remirepo.net> - 7.2.16-1
 - Update to 7.2.16 - http://www.php.net/releases/7_2_16.php
 
-- 
cgit