You are not logged in.

#1 2015-01-14 16:48:44

despian
Member
Registered: 2014-04-13
Posts: 10

PHP failing to retrieve content over ssl

I am am getting the errors bellow when executing the following line of PHP:

include_once 'https://someserver/someotherfile.php';

Log output:

PHP Warning:  include_once(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /files/somefile.php on line x
PHP Warning:  include_once(): Failed to enable crypto in /files/someotherfile.php on line x
PHP Warning:  include_once(https://someserver/someotherfile.php): failed to open stream: operation failed in /files/somefile.php on line x
PHP Warning:  include_once(): Failed opening 'https://someserver/somefile.php' for inclusion (include_path='.:/usr/share/pear') in /files/somefile.php on line x

The issue does not occur for http sources (e.g. http://someserver/somefile.php) but will occur for any https source.

OpenSSL is installed and appears to be configured correctly (I am able to retrieve files from a https source via curl). The config (/etc/ssl/openssl.cnf) is default.

I have reinstalled PHP and the config (/etc/php/php.ini) is default except for the lines below:

extension=openssl.so    (uncommented)
extension=phar.so       (uncommented)
allow_url_include = On  (changed from "Off")

Installed versions:

local/php 5.6.4-1
local/lib32-openssl 1.0.1.k-1
local/openssl 1.0.1.k-1

I have been searching for hours and am unable to find anyone with a similar issue. Any assistance would be greatly appreciated.

edit:

Issue occurs when using any function to access content over an ssl connection. E.g. the following line produces the same error:

echo file_get_contents('https://someserver/somefile');

Last edited by despian (2015-01-14 18:50:31)

Offline

#2 2015-01-14 17:40:26

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

It seems the certificate isn't trusted. What does `curl -v >/dev/null` output for the same url

Offline

#3 2015-01-14 18:01:32

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

The issue occurs with any https source. Curl outputs "SSL certificate verify ok." when testing with the same file.

I have discovered the issue is not just with the include command but occurs with the "file_get_contents()" function as well (when passing a https source). It seems it's a general issue with my php installation and ssl.

The error cites "SSL3_GET_SERVER_CERTIFICATE". Could this be an issue with SSL3? Is there any way to disable the sslv3 socket transport in the php config?

Last edited by despian (2015-01-14 18:04:53)

Offline

#4 2015-01-14 18:18:33

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

The error says: "Failed to enable crypto in https://someserver/somefile.php on line x". Does it really have https:// in there? I'd expect a local path instead. Does this happen when running through fpm or is it reproducible in the cli as well?

Offline

#5 2015-01-14 18:34:23

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

Yes the log output is copy pasted only the server name and line number are modified. All tests were run via command line. Although the result is the same if run through apache.

edit:

sorry you are correct that line does cite the php file being executed. I'll correct it in my initial post

Last edited by despian (2015-01-14 18:43:51)

Offline

#6 2015-01-14 18:48:50

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

[edit]ah, okay[/edit]

why would you also install lib32-openssl? What does `strace php -dallow_url_include=on -r "echo include_once 'https://google.com/somefile.php';"` output? Does it contain any hint on why this fails?

Last edited by Spider.007 (2015-01-14 18:49:45)

Offline

#7 2015-01-14 19:20:51

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

The 32-bit ssl must have been installed as a dependency for some other 32-bit package I installed. Shouldn't cause a problem though, right?

I'm not too familiar with the output of strace but these lines look interesting. What do you think?

420: read(3, 0x21acce0, 7)                   = -1 EAGAIN (Resource temporarily unavailable)
427: stat("/etc/ssl/certs/c598f4ac.0", 0x7fffcab78250) = -1 ENOENT (No such file or directory)

Complete output:

1: execve("/usr/bin/php", ["php", "-dallow_url_include=on", "-r", "echo include_once 'https://"...], [/* 53 vars */]) = 0
2: brk(0)                                  = 0x1fcb000
3: access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
4: open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
5: fstat(3, {st_mode=S_IFREG|0644, st_size=272204, ...}) = 0
6: mmap(NULL, 272204, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd286c4000
7: close(3)                                = 0
8: open("/usr/lib/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
9: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220:\0\0\0\0\0\0"..., 832) = 832
10: fstat(3, {st_mode=S_IFREG|0755, st_size=89024, ...}) = 0
11: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c3000
12: mmap(NULL, 2194248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd282ce000
13: mprotect(0x7fbd282e2000, 2093056, PROT_NONE) = 0
14: mmap(0x7fbd284e1000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7fbd284e1000
15: mmap(0x7fbd284e4000, 6984, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd284e4000
16: close(3)                                = 0
17: open("/usr/lib/libreadline.so.6", O_RDONLY|O_CLOEXEC) = 3
18: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260e\1\0\0\0\0\0"..., 832) = 832
19: fstat(3, {st_mode=S_IFREG|0555, st_size=350087, ...}) = 0
20: mmap(NULL, 2402176, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd28083000
21: mprotect(0x7fbd280c4000, 2097152, PROT_NONE) = 0
22: mmap(0x7fbd282c4000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x41000) = 0x7fbd282c4000
23: mmap(0x7fbd282cd000, 1920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd282cd000
24: close(3)                                = 0
25: open("/usr/lib/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
26: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000#\0\0\0\0\0\0"..., 832) = 832
27: fstat(3, {st_mode=S_IFREG|0755, st_size=88592, ...}) = 0
28: mmap(NULL, 2183688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd27e6d000
29: mprotect(0x7fbd27e82000, 2093056, PROT_NONE) = 0
30: mmap(0x7fbd28081000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7fbd28081000
31: close(3)                                = 0
32: open("/usr/lib/libpcre.so.1", O_RDONLY|O_CLOEXEC) = 3
33: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\27\0\0\0\0\0\0"..., 832) = 832
34: fstat(3, {st_mode=S_IFREG|0755, st_size=452840, ...}) = 0
35: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c2000
36: mmap(NULL, 2548328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd27bfe000
37: mprotect(0x7fbd27c6c000, 2093056, PROT_NONE) = 0
38: mmap(0x7fbd27e6b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fbd27e6b000
39: close(3)                                = 0
40: open("/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
41: read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200U\0\0\0\0\0\0"..., 832) = 832
42: fstat(3, {st_mode=S_IFREG|0755, st_size=1067456, ...}) = 0
43: mmap(NULL, 3162456, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd278f9000
44: mprotect(0x7fbd279fc000, 2097152, PROT_NONE) = 0
45: mmap(0x7fbd27bfc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x103000) = 0x7fbd27bfc000
46: close(3)                                = 0
47: open("/usr/lib/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
48: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\16\0\0\0\0\0\0"..., 832) = 832
49: fstat(3, {st_mode=S_IFREG|0755, st_size=14672, ...}) = 0
50: mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd276f5000
51: mprotect(0x7fbd276f8000, 2093056, PROT_NONE) = 0
52: mmap(0x7fbd278f7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fbd278f7000
53: close(3)                                = 0
54: open("/usr/lib/libxml2.so.2", O_RDONLY|O_CLOEXEC) = 3
55: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\344\2\0\0\0\0\0"..., 832) = 832
56: fstat(3, {st_mode=S_IFREG|0755, st_size=1455160, ...}) = 0
57: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c1000
58: mmap(NULL, 3555672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd27390000
59: mprotect(0x7fbd274ea000, 2093056, PROT_NONE) = 0
60: mmap(0x7fbd276e9000, 40960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x159000) = 0x7fbd276e9000
61: mmap(0x7fbd276f3000, 4440, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd276f3000
62: close(3)                                = 0
63: open("/usr/lib/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
64: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300-\6\0\0\0\0\0"..., 832) = 832
65: fstat(3, {st_mode=S_IFREG|0555, st_size=2425792, ...}) = 0
66: mmap(NULL, 4264248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd26f7e000
67: mprotect(0x7fbd27164000, 2097152, PROT_NONE) = 0
68: mmap(0x7fbd27364000, 163840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e6000) = 0x7fbd27364000
69: mmap(0x7fbd2738c000, 12600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd2738c000
70: close(3)                                = 0
71: open("/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
72: read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\1\2\0\0\0\0\0"..., 832) = 832
73: fstat(3, {st_mode=S_IFREG|0755, st_size=1984416, ...}) = 0
74: mmap(NULL, 3813200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd26bdb000
75: mprotect(0x7fbd26d74000, 2097152, PROT_NONE) = 0
76: mmap(0x7fbd26f74000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x199000) = 0x7fbd26f74000
77: mmap(0x7fbd26f7a000, 16208, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd26f7a000
78: close(3)                                = 0
79: open("/usr/lib/libncursesw.so.5", O_RDONLY|O_CLOEXEC) = 3
80: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0P\1\0\0\0\0\0"..., 832) = 832
81: fstat(3, {st_mode=S_IFREG|0755, st_size=411648, ...}) = 0
82: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c0000
83: mmap(NULL, 2508816, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd26976000
84: mprotect(0x7fbd269d5000, 2097152, PROT_NONE) = 0
85: mmap(0x7fbd26bd5000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7fbd26bd5000
86: close(3)                                = 0
87: open("/usr/lib/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
88: read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300`\0\0\0\0\0\0"..., 832) = 832
89: fstat(3, {st_mode=S_IFREG|0755, st_size=138248, ...}) = 0
90: mmap(NULL, 2208912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd2675a000
91: mprotect(0x7fbd26771000, 2093056, PROT_NONE) = 0
92: mmap(0x7fbd26970000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0x7fbd26970000
93: mmap(0x7fbd26972000, 13456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd26972000
94: close(3)                                = 0
95: open("/usr/lib/liblzma.so.5", O_RDONLY|O_CLOEXEC) = 3
96: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340)\0\0\0\0\0\0"..., 832) = 832
97: fstat(3, {st_mode=S_IFREG|0755, st_size=141744, ...}) = 0
98: mmap(NULL, 2236920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd26537000
99: mprotect(0x7fbd26559000, 2093056, PROT_NONE) = 0
100: mmap(0x7fbd26758000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7fbd26758000
101: close(3)                                = 0
102: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286bf000
103: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286be000
104: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286bd000
105: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286bc000
106: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286bb000
107: arch_prctl(ARCH_SET_FS, 0x7fbd286bc700) = 0
108: mprotect(0x7fbd26f74000, 16384, PROT_READ) = 0
109: mprotect(0x7fbd26970000, 4096, PROT_READ) = 0
110: mprotect(0x7fbd26758000, 4096, PROT_READ) = 0
111: mprotect(0x7fbd26bd5000, 16384, PROT_READ) = 0
112: mprotect(0x7fbd28081000, 4096, PROT_READ) = 0
113: mprotect(0x7fbd278f7000, 4096, PROT_READ) = 0
114: mprotect(0x7fbd27364000, 114688, PROT_READ) = 0
115: mprotect(0x7fbd27bfc000, 4096, PROT_READ) = 0
116: mprotect(0x7fbd276e9000, 32768, PROT_READ) = 0
117: mprotect(0x7fbd27e6b000, 4096, PROT_READ) = 0
118: mprotect(0x7fbd282c4000, 8192, PROT_READ) = 0
119: mprotect(0x7fbd284e1000, 8192, PROT_READ) = 0
120: mprotect(0xda6000, 667648, PROT_READ)   = 0
121: mprotect(0x7fbd28707000, 4096, PROT_READ) = 0
122: munmap(0x7fbd286c4000, 272204)          = 0
123: set_tid_address(0x7fbd286bc9d0)         = 2834
124: set_robust_list(0x7fbd286bc9e0, 24)     = 0
125: rt_sigaction(SIGRTMIN, {0x7fbd2675fb90, [], SA_RESTORER|SA_SIGINFO, 0x7fbd2676a210}, NULL, 8) = 0
126: rt_sigaction(SIGRT_1, {0x7fbd2675fc20, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7fbd2676a210}, NULL, 8) = 0
127: rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
128: getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
129: brk(0)                                  = 0x1fcb000
130: brk(0x1fec000)                          = 0x1fec000
131: rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7fbd26c0eb20}, {SIG_DFL, [], 0}, 8) = 0
132: mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c6000
133: getcwd("/somedir", 4096) = 45
134: mmap(NULL, 1052672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd285ba000
135: open("/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
136: fstat(3, {st_mode=S_IFREG|0644, st_size=1607760, ...}) = 0
137: mmap(NULL, 1607760, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd263ae000
138: close(3)                                = 0
139: open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 3
140: fstat(3, {st_mode=S_IFREG|0644, st_size=3661, ...}) = 0
141: fstat(3, {st_mode=S_IFREG|0644, st_size=3661, ...}) = 0
142: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
143: read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\7\0\0\0\7\0\0\0\0"..., 4096) = 3661
144: lseek(3, -2338, SEEK_CUR)               = 1323
145: read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 2338
146: close(3)                                = 0
147: munmap(0x7fbd286c5000, 4096)            = 0
148: lstat("/home/me/bin/php", 0x7fffcab77df0) = -1 ENOENT (No such file or directory)
149: lstat("/usr/local/bin/php", 0x7fffcab77df0) = -1 ENOENT (No such file or directory)
150: lstat("/usr/local/sbin/php", 0x7fffcab77df0) = -1 ENOENT (No such file or directory)
151: lstat("/usr/local/bin/php", 0x7fffcab77df0) = -1 ENOENT (No such file or directory)
152: lstat("/usr/bin/php", {st_mode=S_IFREG|0755, st_size=8730816, ...}) = 0
153: lstat("/usr/bin", {st_mode=S_IFDIR|0755, st_size=79146, ...}) = 0
154: lstat("/usr", {st_mode=S_IFDIR|0755, st_size=86, ...}) = 0
155: access("/usr/bin/php", X_OK)            = 0
156: stat("/usr/bin/php", {st_mode=S_IFREG|0755, st_size=8730816, ...}) = 0
157: open("/usr/bin/php-cli.ini", O_RDONLY)  = -1 ENOENT (No such file or directory)
158: open("/etc/php/php-cli.ini", O_RDONLY)  = -1 ENOENT (No such file or directory)
159: open("/usr/bin/php.ini", O_RDONLY)      = -1 ENOENT (No such file or directory)
160: open("/etc/php/php.ini", O_RDONLY)      = 3
161: ioctl(3, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, 0x7fffcab78b40) = -1 ENOTTY (Inappropriate ioctl for device)
162: fstat(3, {st_mode=S_IFREG|0644, st_size=71932, ...}) = 0
163: mmap(NULL, 71964, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd285a8000
164: lseek(3, 0, SEEK_CUR)                   = 0
165: munmap(0x7fbd285a8000, 71964)           = 0
166: close(3)                                = 0
167: openat(AT_FDCWD, "/etc/php/conf.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
168: getdents(3, /* 2 entries */, 32768)     = 48
169: getdents(3, /* 0 entries */, 32768)     = 0
170: close(3)                                = 0
171: mmap(NULL, 323584, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd2856b000
172: brk(0x200d000)                          = 0x200d000
173: brk(0x202e000)                          = 0x202e000
174: brk(0x204f000)                          = 0x204f000
175: futex(0x7fbd278f80c8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
176: open("/usr/lib/php/modules/curl.so", O_RDONLY|O_CLOEXEC) = 3
177: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0<\0\0\0\0\0\0"..., 832) = 832
178: fstat(3, {st_mode=S_IFREG|0755, st_size=85096, ...}) = 0
179: mmap(NULL, 2180288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd26199000
180: mprotect(0x7fbd261ac000, 2093056, PROT_NONE) = 0
181: mmap(0x7fbd263ab000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0x7fbd263ab000
182: close(3)                                = 0
183: open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
184: fstat(3, {st_mode=S_IFREG|0644, st_size=272204, ...}) = 0
185: mmap(NULL, 272204, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd28528000
186: close(3)                                = 0
187: open("/usr/lib/libcurl.so.4", O_RDONLY|O_CLOEXEC) = 3
188: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\243\0\0\0\0\0\0"..., 832) = 832
189: fstat(3, {st_mode=S_IFREG|0755, st_size=456000, ...}) = 0
190: mmap(NULL, 2551816, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd25f29000
191: mprotect(0x7fbd25f96000, 2093056, PROT_NONE) = 0
192: mmap(0x7fbd26195000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6c000) = 0x7fbd26195000
193: mmap(0x7fbd26198000, 8, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd26198000
194: close(3)                                = 0
195: open("/usr/lib/libidn.so.11", O_RDONLY|O_CLOEXEC) = 3
196: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\00001\0\0\0\0\0\0"..., 832) = 832
197: fstat(3, {st_mode=S_IFREG|0755, st_size=211432, ...}) = 0
198: mmap(NULL, 2306528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd25cf5000
199: mprotect(0x7fbd25d27000, 2097152, PROT_NONE) = 0
200: mmap(0x7fbd25f27000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x32000) = 0x7fbd25f27000
201: close(3)                                = 0
202: open("/usr/lib/libssh2.so.1", O_RDONLY|O_CLOEXEC) = 3
203: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220V\0\0\0\0\0\0"..., 832) = 832
204: fstat(3, {st_mode=S_IFREG|0755, st_size=167224, ...}) = 0
205: mmap(NULL, 2262720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd25acc000
206: mprotect(0x7fbd25af4000, 2093056, PROT_NONE) = 0
207: mmap(0x7fbd25cf3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x27000) = 0x7fbd25cf3000
208: close(3)                                = 0
209: open("/usr/lib/libssl.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
210: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260z\1\0\0\0\0\0"..., 832) = 832
211: fstat(3, {st_mode=S_IFREG|0555, st_size=505240, ...}) = 0
212: mmap(NULL, 2552560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd2585c000
213: mprotect(0x7fbd258c1000, 2093056, PROT_NONE) = 0
214: mmap(0x7fbd25ac0000, 49152, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x64000) = 0x7fbd25ac0000
215: close(3)                                = 0
216: open("/usr/lib/libgssapi_krb5.so.2", O_RDONLY|O_CLOEXEC) = 3
217: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\302\0\0\0\0\0\0"..., 832) = 832
218: fstat(3, {st_mode=S_IFREG|0644, st_size=313696, ...}) = 0
219: mmap(NULL, 2409344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd2560f000
220: mprotect(0x7fbd25659000, 2093056, PROT_NONE) = 0
221: mmap(0x7fbd25858000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x49000) = 0x7fbd25858000
222: close(3)                                = 0
223: open("/usr/lib/libkrb5.so.3", O_RDONLY|O_CLOEXEC) = 3
224: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300P\2\0\0\0\0\0"..., 832) = 832
225: fstat(3, {st_mode=S_IFREG|0644, st_size=937552, ...}) = 0
226: mmap(NULL, 3033408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd2532a000
227: mprotect(0x7fbd253ff000, 2093056, PROT_NONE) = 0
228: mmap(0x7fbd255fe000, 69632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd4000) = 0x7fbd255fe000
229: close(3)                                = 0
230: open("/usr/lib/libk5crypto.so.3", O_RDONLY|O_CLOEXEC) = 3
231: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320H\0\0\0\0\0\0"..., 832) = 832
232: fstat(3, {st_mode=S_IFREG|0644, st_size=199504, ...}) = 0
233: mmap(NULL, 2298456, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd250f8000
234: mprotect(0x7fbd25127000, 2093056, PROT_NONE) = 0
235: mmap(0x7fbd25326000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7fbd25326000
236: mmap(0x7fbd25329000, 600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd25329000
237: close(3)                                = 0
238: open("/usr/lib/libcom_err.so.2", O_RDONLY|O_CLOEXEC) = 3
239: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\25\0\0\0\0\0\0"..., 832) = 832
240: fstat(3, {st_mode=S_IFREG|0755, st_size=14632, ...}) = 0
241: mmap(NULL, 2109960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd24ef4000
242: mprotect(0x7fbd24ef7000, 2093056, PROT_NONE) = 0
243: mmap(0x7fbd250f6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fbd250f6000
244: close(3)                                = 0
245: open("/usr/lib/libkrb5support.so.0", O_RDONLY|O_CLOEXEC) = 3
246: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P0\0\0\0\0\0\0"..., 832) = 832
247: fstat(3, {st_mode=S_IFREG|0644, st_size=52208, ...}) = 0
248: mmap(NULL, 2147688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd24ce7000
249: mprotect(0x7fbd24cf3000, 2093056, PROT_NONE) = 0
250: mmap(0x7fbd24ef2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fbd24ef2000
251: close(3)                                = 0
252: open("/usr/lib/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 3
253: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\25\0\0\0\0\0\0"..., 832) = 832
254: fstat(3, {st_mode=S_IFREG|0755, st_size=14568, ...}) = 0
255: mmap(NULL, 2109720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd24ae3000
256: mprotect(0x7fbd24ae6000, 2093056, PROT_NONE) = 0
257: mmap(0x7fbd24ce5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fbd24ce5000
258: close(3)                                = 0
259: mprotect(0x7fbd24ce5000, 4096, PROT_READ) = 0
260: mprotect(0x7fbd24ef2000, 4096, PROT_READ) = 0
261: mprotect(0x7fbd250f6000, 4096, PROT_READ) = 0
262: mprotect(0x7fbd25326000, 8192, PROT_READ) = 0
263: mprotect(0x7fbd255fe000, 57344, PROT_READ) = 0
264: mprotect(0x7fbd25858000, 8192, PROT_READ) = 0
265: mprotect(0x7fbd25ac0000, 20480, PROT_READ) = 0
266: mprotect(0x7fbd25cf3000, 4096, PROT_READ) = 0
267: mprotect(0x7fbd25f27000, 4096, PROT_READ) = 0
268: mprotect(0x7fbd26195000, 8192, PROT_READ) = 0
269: mprotect(0x7fbd263ab000, 8192, PROT_READ) = 0
270: munmap(0x7fbd28528000, 272204)          = 0
271: open("/usr/lib/php/modules/gettext.so", O_RDONLY|O_CLOEXEC) = 3
272: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\20\0\0\0\0\0\0"..., 832) = 832
273: fstat(3, {st_mode=S_IFREG|0755, st_size=14696, ...}) = 0
274: mmap(NULL, 2109872, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd248df000
275: mprotect(0x7fbd248e1000, 2097152, PROT_NONE) = 0
276: mmap(0x7fbd24ae1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fbd24ae1000
277: close(3)                                = 0
278: mprotect(0x7fbd24ae1000, 4096, PROT_READ) = 0
279: open("/usr/lib/php/modules/openssl.so", O_RDONLY|O_CLOEXEC) = 3
280: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\260\0\0\0\0\0\0"..., 832) = 832
281: fstat(3, {st_mode=S_IFREG|0755, st_size=144968, ...}) = 0
282: mmap(NULL, 2244368, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd246bb000
283: mprotect(0x7fbd246da000, 2097152, PROT_NONE) = 0
284: mmap(0x7fbd248da000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1f000) = 0x7fbd248da000
285: mmap(0x7fbd248de000, 3856, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fbd248de000
286: close(3)                                = 0
287: mprotect(0x7fbd248da000, 12288, PROT_READ) = 0
288: open("/usr/lib/php/modules/phar.so", O_RDONLY|O_CLOEXEC) = 3
289: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0Pc\0\0\0\0\0\0"..., 832) = 832
290: fstat(3, {st_mode=S_IFREG|0755, st_size=268592, ...}) = 0
291: mmap(NULL, 2365016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd24479000
292: mprotect(0x7fbd244b8000, 2093056, PROT_NONE) = 0
293: mmap(0x7fbd246b7000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3e000) = 0x7fbd246b7000
294: close(3)                                = 0
295: mprotect(0x7fbd246b7000, 8192, PROT_READ) = 0
296: brk(0x2070000)                          = 0x2070000
297: futex(0x7fbd276f3e48, FUTEX_WAKE_PRIVATE, 2147483647) = 0
298: brk(0x2091000)                          = 0x2091000
299: brk(0x20b2000)                          = 0x20b2000
300: brk(0x20d3000)                          = 0x20d3000
301: brk(0x20f4000)                          = 0x20f4000
302: brk(0x2115000)                          = 0x2115000
303: brk(0x2136000)                          = 0x2136000
304: brk(0x2157000)                          = 0x2157000
305: brk(0x2178000)                          = 0x2178000
306: brk(0x2199000)                          = 0x2199000
307: open("/etc/ssl/openssl.cnf", O_RDONLY)  = 3
308: fstat(3, {st_mode=S_IFREG|0644, st_size=10835, ...}) = 0
309: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
310: read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
311: read(3, "Netscape crash on BMPStrings or "..., 4096) = 4096
312: read(3, " this to avoid interpreting an e"..., 4096) = 2643
313: read(3, "", 4096)                       = 0
314: close(3)                                = 0
315: munmap(0x7fbd286c5000, 4096)            = 0
316: brk(0x21ba000)                          = 0x21ba000
317: rt_sigaction(SIGPROF, {0x637f20, [PROF], SA_RESTORER|SA_RESTART, 0x7fbd26c0eb20}, {SIG_DFL, [], 0}, 8) = 0
318: rt_sigprocmask(SIG_UNBLOCK, [PROF], NULL, 8) = 0
319: fstat(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
320: fstat(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
321: lseek(0, 0, SEEK_CUR)                   = -1 ESPIPE (Illegal seek)
322: fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
323: fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
324: lseek(1, 0, SEEK_CUR)                   = -1 ESPIPE (Illegal seek)
325: fstat(2, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
326: fstat(2, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
327: lseek(2, 0, SEEK_CUR)                   = -1 ESPIPE (Illegal seek)
328: socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3
329: close(3)                                = 0
330: socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
331: connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
332: close(3)                                = 0
333: socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
334: connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
335: close(3)                                = 0
336: open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
337: fstat(3, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
338: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
339: read(3, "# Begin /etc/nsswitch.conf\n\npass"..., 4096) = 234
340: read(3, "", 4096)                       = 0
341: close(3)                                = 0
342: munmap(0x7fbd286c5000, 4096)            = 0
343: open("/etc/host.conf", O_RDONLY|O_CLOEXEC) = 3
344: fstat(3, {st_mode=S_IFREG|0644, st_size=63, ...}) = 0
345: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
346: read(3, "#\n# /etc/host.conf\n#\n\norder host"..., 4096) = 63
347: read(3, "", 4096)                       = 0
348: close(3)                                = 0
349: munmap(0x7fbd286c5000, 4096)            = 0
350: futex(0x7fbd26f7d044, FUTEX_WAKE_PRIVATE, 2147483647) = 0
351: open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
352: fstat(3, {st_mode=S_IFREG|0644, st_size=51, ...}) = 0
353: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
354: read(3, "# Generated by resolvconf\nnamese"..., 4096) = 51
355: read(3, "", 4096)                       = 0
356: close(3)                                = 0
357: munmap(0x7fbd286c5000, 4096)            = 0
358: uname({sys="Linux", node="mymachinename", ...}) = 0
359: open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
360: fstat(3, {st_mode=S_IFREG|0644, st_size=272204, ...}) = 0
361: mmap(NULL, 272204, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd28528000
362: close(3)                                = 0
363: open("/usr/lib/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
364: read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\"\0\0\0\0\0\0"..., 832) = 832
365: fstat(3, {st_mode=S_IFREG|0755, st_size=51808, ...}) = 0
366: mmap(NULL, 2148488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fbd2426c000
367: mprotect(0x7fbd24277000, 2097152, PROT_NONE) = 0
368: mmap(0x7fbd24477000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fbd24477000
369: close(3)                                = 0
370: mprotect(0x7fbd24477000, 4096, PROT_READ) = 0
371: munmap(0x7fbd28528000, 272204)          = 0
372: open("/etc/hosts", O_RDONLY|O_CLOEXEC)  = 3
373: fstat(3, {st_mode=S_IFREG|0644, st_size=264, ...}) = 0
374: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
375: read(3, "#\n# /etc/hosts: static lookup ta"..., 4096) = 264
376: read(3, "", 4096)                       = 0
377: close(3)                                = 0
378: munmap(0x7fbd286c5000, 4096)            = 0
379: open("/etc/gai.conf", O_RDONLY|O_CLOEXEC) = 3
380: fstat(3, {st_mode=S_IFREG|0644, st_size=2584, ...}) = 0
381: fstat(3, {st_mode=S_IFREG|0644, st_size=2584, ...}) = 0
382: mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd286c5000
383: read(3, "# Configuration for getaddrinfo("..., 4096) = 2584
384: read(3, "", 4096)                       = 0
385: close(3)                                = 0
386: munmap(0x7fbd286c5000, 4096)            = 0
387: futex(0x7fbd26f7b284, FUTEX_WAKE_PRIVATE, 2147483647) = 0
388: socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
389: bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
390: getsockname(3, {sa_family=AF_NETLINK, pid=2834, groups=00000000}, [12]) = 0
391: sendto(3, "\24\0\0\0\26\0\1\3\306\273\266T\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
392: recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"L\0\0\0\24\0\2\0\306\273\266T\22\v\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 256
393: recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"H\0\0\0\24\0\2\0\306\273\266T\22\v\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 144
394: recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\306\273\266T\22\v\0\0\0\0\0\0", 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
395: close(3)                                = 0
396: socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
397: connect(3, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
398: getsockname(3, {sa_family=AF_INET, sin_port=htons(53655), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0
399: close(3)                                = 0
400: socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3
401: connect(3, {sa_family=AF_INET6, sin6_port=htons(0), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
402: getsockname(3, {sa_family=AF_INET6, sin6_port=htons(50202), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0
403: close(3)                                = 0
404: socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3
405: fcntl(3, F_GETFL)                       = 0x2 (flags O_RDWR)
406: fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
407: connect(3, {sa_family=AF_INET6, sin6_port=htons(443), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EINPROGRESS (Operation now in progress)
408: poll([{fd=3, events=POLLIN|POLLOUT|POLLERR|POLLHUP}], 1, 60000) = 1 ([{fd=3, revents=POLLOUT}])
409: getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
410: fcntl(3, F_SETFL, O_RDWR)               = 0
411: open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 4
412: fstat(4, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
413: poll([{fd=4, events=POLLIN}], 1, 10)    = 1 ([{fd=4, revents=POLLIN}])
414: read(4, "\241\351\215'2y\320\235\315\23\231\251\f\36n\363\3568\226\25!9\231b\26\241\202&\303\22\332\202", 32) = 32
415: close(4)                                = 0
416: getuid()                                = 1000
417: fcntl(3, F_GETFL)                       = 0x2 (flags O_RDWR)
418: fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
419: write(3, "\26\3\1\2\0\1\0\1\374\3\3a\310\34\334\323\236\16\307\232\356\210\302\33\5\256\332s\267\254q\330"..., 517) = 517
420: read(3, 0x21acce0, 7)                   = -1 EAGAIN (Resource temporarily unavailable)
421: poll([{fd=3, events=POLLIN|POLLPRI}], 1, 59999) = 1 ([{fd=3, revents=POLLIN}])
422: read(3, "\26\3\3\0F\2\0", 7)            = 7
423: brk(0x21db000)                          = 0x21db000
424: read(3, "\0B\3\3$\363|2\327=*\310;\266\33\337\317:\247\201\232\355\233\367\370\300\256\10\352\211\34\372"..., 68) = 68
425: read(3, "\26\3\3\5k", 5)                = 5
426: read(3, "\v\0\5g\0\5d\0\5a0\202\5]0\202\3E\240\3\2\1\2\2\t\0\224\343#\256\276\206"..., 1387) = 1387
427: stat("/etc/ssl/certs/c598f4ac.0", 0x7fffcab78250) = -1 ENOENT (No such file or directory)
428: write(3, "\25\3\3\0\2\0020", 7)         = 7
429: write(2, "PHP Warning:  include_once(): SS"..., 201PHP Warning:  include_once(): SSL operation failed with code 1. OpenSSL Error messages:
430: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in Command line code on line 1
431: ) = 201
432: fcntl(3, F_GETFL)                       = 0x802 (flags O_RDWR|O_NONBLOCK)
433: fcntl(3, F_SETFL, O_RDWR)               = 0
434: write(2, "PHP Warning:  include_once(): Fa"..., 85PHP Warning:  include_once(): Failed to enable crypto in Command line code on line 1
435: ) = 85
436: close(3)                                = 0
437: write(2, "PHP Warning:  include_once(https"..., 141PHP Warning:  include_once(https://someserver/somefile.php): failed to open stream: operation failed in Command line code on line 1
438: ) = 141
439: write(2, "PHP Warning:  include_once(): Fa"..., 168PHP Warning:  include_once(): Failed opening 'https://someserver/somefile.php' for inclusion (include_path='.:/usr/share/pear') in Command line code on line 1
440: ) = 168
441: close(2)                                = 0
442: close(1)                                = 0
443: close(0)                                = 0
444: munmap(0x7fbd24479000, 2365016)         = 0
445: munmap(0x7fbd246bb000, 2244368)         = 0
446: munmap(0x7fbd248df000, 2109872)         = 0
447: munmap(0x7fbd26199000, 2180288)         = 0
448: munmap(0x7fbd25f29000, 2551816)         = 0
449: munmap(0x7fbd25cf5000, 2306528)         = 0
450: munmap(0x7fbd25acc000, 2262720)         = 0
451: munmap(0x7fbd2585c000, 2552560)         = 0
452: munmap(0x7fbd2560f000, 2409344)         = 0
453: munmap(0x7fbd2532a000, 3033408)         = 0
454: munmap(0x7fbd250f8000, 2298456)         = 0
455: munmap(0x7fbd24ef4000, 2109960)         = 0
456: munmap(0x7fbd24ce7000, 2147688)         = 0
457: munmap(0x7fbd24ae3000, 2109720)         = 0
458: munmap(0x7fbd285ba000, 1052672)         = 0
459: munmap(0x7fbd286c6000, 266240)          = 0
460: munmap(0x7fbd2856b000, 323584)          = 0
461: exit_group(0)                           = ?
462: +++ exited with 0 +++

Offline

#8 2015-01-14 20:00:12

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

Hmm; my install reads /etc/ssl/cert.pem and is able to verify the certificate from that. Do you have ca-certificates-utils installed and have the same file? Does `pacman -Qkk ca-certificates-utils` mention any errors?

Offline

#9 2015-01-14 21:34:55

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

yes the package is installed and the check doesn't show any errors.

Offline

#10 2015-01-15 13:54:32

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

Okay; a wild guess but you try to disable openssl? You don't need it for https in php and it seems like the openssl module overwrites php's standard functionality

Offline

#11 2015-01-15 14:30:25

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

How would I go about getting PHP to handle ssl on it's own?

If I disable the openssl extension in php.ini then run the command again I get the following error:

PHP Warning:  include_once(): Unable to find the wrapper "https" - did you forget to enable it when you configured PHP? in Command line code on line 1

Offline

#12 2015-01-15 20:18:30

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

Oh, sorry I'm mistaken, the openssl module is indeed required. Looking at the code I don't quickly spot why your binary behaves differently. Did you run the code I posted? Because from the strace php seems to be connecting to localhost instead; which is probably using a self-signed certificate.

Offline

#13 2015-01-16 13:29:21

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

yep i was testing with a self signed cert but i had added the cafile to my php.ini i was also testing with another web server with a valid cert which is working with the same code on an ubuntu box and an older version of php.

I have now tested with some other https servers and they are working okay. so it seems the issue is speciffic to the one webserver and my php setup. i have modified the code to use http only in the dev environment on my machine so this should get around the problem for now.

thanks very much for your assistance. sorry for giving confusing information.

Offline

#14 2015-01-16 20:54:02

Spider.007
Member
Registered: 2004-06-20
Posts: 1,175

Re: PHP failing to retrieve content over ssl

Well, next time be honest and don't say things like "will occur for any https source." if you didn't actually test that. It's obvious that php cannot verify a self-signed certificate, and by obfuscating that information in a topic like this makes me rethink before helping you again. No-one benefits

Offline

#15 2015-01-17 18:36:09

despian
Member
Registered: 2014-04-13
Posts: 10

Re: PHP failing to retrieve content over ssl

It should work with the self signed cert if i provide the ca file which i did and i had tested another server with a valid cert and got the same result. my error was that i hadn't tested other servers. but i really am grateful for your time even if we didn't manage to solve the issue.

Offline

Board footer

Powered by FluxBB