stream_socket_enable_crypto() not implemented for client sockets

[mingtse]

stream's ssl and tls are not working in hhvm.

Running the openssl tests

http://gcov.php.net/viewer.php?version=PHP_5_3&func=tests&file=ext%2Fopenssl%2Ftests%2Fsni_001.phpt

None of them pass. HHVM exits with message:

HipHop Fatal error: Undefined function: stream_socket_enable_crypto

[scannell]

It looks stream_socket_enable_crypto has not been implemented yet. Feel free to submit a PR if you (or someone else reading this) gets to this before we do.

[machris]

im on hhvm-fastcgi + Laravel
Im having same issue when trying to send mail SMTP via Mandrill
gives stream_socket_enable_crypto error

[mandersondesign]

I would love to hear if any progress on this has been made. Unable to send email via Swiftmailer on our server using HHVM.

Thanks!

[benfinn]

Ditto. It makes a number of interest libraries fail, like PHPMailer, for example.

[c0h1b4]

Any progress on stream_socket_enable_crypto function to be available? If not is there any workarounds? I really need to use swiftmailer, but without TLS encryption, it is a no go for HHVM. Still using old, slow & reliable PHPFPM.

[aosaginohi]

Having the same problem with Xenforo it just gives a blank page whenever you try to signup at the point it does try to sent the registration email.

Seems everything else works so this is the only thing stopping me from fully being able to use Xenforo on hhvm.

Error:
\nFatal error: Call to undefined function stream_socket_enable_crypto() in /public/library/Zend/Mail/Protocol/Smtp.php on line 206

[GabrielGil]

+1 from here!

[ccalleu]

same story, laravel on hhvm using swiftmailer library fails, +1

[aranere]

Same here.. Using Laravel with Swiftmailer.

[erikcvisser]

+1! Any way we can contribute?

[SiebelsTim]

@erikcvisser Sure.
stream_socket_enable_crypto needs to be implemented.

Look into hphp/runtime/ext/stream/ext_stream.cpp for other stream functions.

PHP's implementation is at https://github.com/php/php-src/blob/088eedfaa186e79f6f86b814f50efc947350bf88/ext/standard/streamsfuncs.c#L1493

[valentinhocher]

+1 needed for apple apn push

[asowers1]

+1 Is there an official work around for this?

[c0h1b4]

Is this issue ever going to be addressed? If HHVM developers are not interested or think this is superfluous, please close this thread.

[r3wt]

of course they are not going to fix it. they only fix shit that benefits them. anything else they say "feel free to submit a pull request"

[r3wt]

\nFatal error: Uncaught exception 'Swift_TransportException' with message 'Connection could not be established with host smtp.mandrillapp.com [Connection timed out #110]' in /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/StreamBuffer.php:274\nStack trace:\n#0 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/StreamBuffer.php(64): Swift_Transport_StreamBuffer->_establishSocketConnection()\n#1 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/AbstractSmtpTransport.php(115): Swift_Transport_StreamBuffer->initialize()\n#2 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Mailer.php(80): Swift_Transport_AbstractSmtpTransport->start()\n#3 /usr/share/nginx/html/test.php(14): Swift_Mailer->send()\n#4 {main}
\nFatal error: Uncaught exception 'Swift_TransportException' with message 'Connection could not be established with host smtp.mandrillapp.com [Connection timed out #110]' in /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/StreamBuffer.php:274\nStack trace:\n#0 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/StreamBuffer.php(64): Swift_Transport_StreamBuffer->_establishSocketConnection()\n#1 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Transport/AbstractSmtpTransport.php(115): Swift_Transport_StreamBuffer->initialize()\n#2 /usr/share/nginx/html/giannis/api/swiftmailer/lib/classes/Swift/Mailer.php(80): Swift_Transport_AbstractSmtpTransport->start()\n#3 /usr/share/nginx/html/test.php(14): Swift_Mailer->send()\n#4 {main}

I can successfully reproduce the problem

`

[fredemmott]

Sorry; while we currently have 7 people working full-time on improving HHVM for non-Facebook users, this currently isn't at the top of the pile - we try to prioritize based on balancing how popular a request is vs how long it's likely to take to implement/test. This is becoming a popular issue, so it's fairly likely to be re-prioritized once some of our current projects finish.

[JoelMarcey]

This functionality is something that takes longer than it might appear on the surface, given the sensitivity of the security implications around SSL and TLS. We just don't what to throw a half-baked implementation out to the world for something of this nature.

[emlynwest]

This would be a useful feature for fuelphp/email so 👍 from fuelphp

[jg-development]

Hi @antonbe
you can use smtp in magento and it works fine with hhvm. Install an extension like smtppro.
Greetings Jan

[fredemmott]

Closing as implementation is in master (hopefully in tomorrow's nightlies); we are currently expecting this in 3.8 too (it's in the branch), though that's not guaranteed - depends on further testing. We'll revert the cherry-pick and delay it to 3.9 if it leads to unrelated problems.

[giano]

Great! Actually we "glided" on this using smtppro + mandrill. Can't wait to
test on dev site.

On Mon, Jun 29, 2015 at 7:46 PM Fred Emmott notifications@github.com
wrote:

Closed #1647 #1647.

—
Reply to this email directly or view it on GitHub
#1647 (comment).

[corientdev]

Anybody please confirm if this implementation is included in latest nighty released??

[fredemmott]

It's in 2015.07.01 - tested with the Trusty package.

[linkshops]

Hi fredemmott, I am still having trouble with Call to undefined function stream_socket_enable_crypto() error for SMTP pro plugin for Magento on Nginx + HHVM. Any tips on how to apply the latest build (and where) to make it applied on my server?

[fredemmott]

If you're not running hhvm-nightly, you don't have it yet. You can either wait for 3.8 (recommended for production), or if you don't mind installing barely-tested versions: http://hhvm.com/blog/3203/nightly-packages

[fredemmott]

This is included in HHVM 3.8.0 :)

[KarimGeiger]

@fredemmott You're awesome! Thanks a lot :)

[linkshops]

So awesome!

2015-07-15 6:00 GMT+09:00 Karim Geiger notifications@github.com:

@fredemmott https://github.com/fredemmott You're awesome! Thanks a lot
:)

—
Reply to this email directly or view it on GitHub
#1647 (comment).

[r3wt]

@fredemmott How can i enable it? I see that it freezes for like 15 seconds and times out when trying to send with gmail smtp server

EDIT; NVM but now i am getting some warnings about the timezone.

[EmperorKonstantin]

It works! Latest Version of Magento with HHVM 3.8 and Nginx 1.9.2! Thank you FB and Fred! I can finally stop running PHP alongside HHVM and remove all those ugly hacks!

[tomazzaman]

I tried this out and it's not working properly, I get an error:

Fatal error: Unexpected object type File. in /home/webmaster/www/domain.com/wp-includes/class-smtp.php on line 262

The function in question looks like this:

    public function startTLS()
    {
        if (!$this->sendCommand("STARTTLS", "STARTTLS", 220)) {
            return false;
        }
        // Begin encrypted connection
        if (!stream_socket_enable_crypto(
            $this->smtp_conn,
            true,
            STREAM_CRYPTO_METHOD_TLS_CLIENT
        ) # This is line 262
        ) {
            return false;
        }
        return true;
    }

Am I missing something?

[ghost]

Can confirm with latest (and one older) version of PHPMailer, and HHVM 3.8.0.
I think this is postfix/TLS related.

smtpd_helo_required                 = yes
smtpd_delay_reject                  = yes
smtpd_use_tls                       = yes
smtpd_tls_eecdh_grade               = strong
tls_eecdh_strong_curve              = prime256v1
tls_eecdh_ultra_curve               = secp384r1
tls_preempt_cipherlist              = yes
smtpd_tls_received_header           = yes
smtpd_tls_mandatory_ciphers         = high
smtpd_tls_ciphers                   = medium
smtpd_tls_mandatory_protocols       = !SSLv2,!SSLv3
smtpd_tls_mandatory_exclude_ciphers = aNULL,eNULL,EXPORT,DES,RC4,MD5,PSK,eECDH,EDH-DSS-DES-CBC3-SHA,EDH-RSA-DES-CDC3-SHA,KRB5-DE5,CBC3-SHA
smtpd_tls_dh1024_param_file         = /etc/ssl/dh2048.pem

Peer Debug Log:

Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: connect from remote.host[1.1.1.1]
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: smtp_stream_setup: maxtime=300 enable_deadline=0
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? 127.0.0.0/8
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? 127.0.0.0/8
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? [::ffff:127.0.0.0]/104
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? [::ffff:127.0.0.0]/104
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? [::1]/128
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? [::1]/128
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? 1.1.1.0/24
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? 1.1.1.0/24
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 220 xxx ESMTP Postfix (Debian/GNU)
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: watchdog_pat: 0x7f1f04069ef0
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: < remote.host[1.1.1.1]: EHLO zzz
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_list_match: remote.host: no match
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_list_match: 1.1.1.1: no match
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-xxx
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-PIPELINING
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-SIZE
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-VRFY
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-ETRN
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-STARTTLS
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-ENHANCEDSTATUSCODES
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250-8BITMIME
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 250 DSN
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: watchdog_pat: 0x7f1f04069ef0
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: < remote.host[1.1.1.1]: STARTTLS
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: > remote.host[1.1.1.1]: 220 2.0.0 Ready to start TLS
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: send attr request = seed
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: send attr size = 32
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: private/tlsmgr: wanted attribute: status
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: input attribute name: status
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: input attribute value: 0
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: private/tlsmgr: wanted attribute: seed
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: input attribute name: seed
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: input attribute value: rJyHJDgGPVCOJrmcO1S275VY2V1UM+wFm3ezVlr8JJw=
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: private/tlsmgr: wanted attribute: (list terminator)
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: input attribute name: (end)
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: SSL_accept error from remote.host[1.1.1.1]: lost connection
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? 127.0.0.0/8
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? 127.0.0.0/8
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? [::ffff:127.0.0.0]/104
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? [::ffff:127.0.0.0]/104
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? [::1]/128
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? [::1]/128
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostname: remote.host ~? 1.1.1.0/24
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: match_hostaddr: 1.1.1.1 ~? 1.1.1.0/24
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: lost connection after STARTTLS from remote.host[1.1.1.1]
Jul 21 13:57:45 xxx postfix/submission/smtpd[8316]: disconnect from remote.host[1.1.1.1]

Not much to go on though.

[ghost]

Ooooh. I just realized, PHPMailer isn't working AT ALL with HHVM 3.8, regardless of stream_socket_enable_crypto(). Before (up to 3.7.2), I never cared that much for the issue on this topic, because I was using PHPMailer on localhost and let postfix do the auth thingy with the relayhost. Latest update broke that. :-(

[Krapulat]

I have the same error as @tomazzaman.

Fatal error: Unexpected object type File. in /var/www/domain.com/wp-includes/class-smtp.php on line 262

Only happen when using STARTTLS.

Without HHVM, with PHP-FPM, it works fine. So I think it is not problem of Postfix.

Any thought?

[fredemmott]

Please open a new issue, ideally with < 5 line example that's just a call to stream_socket_enable_crypto() on a stream that works in PHP5 and not hhvm and doesn't depend on any framework/library. calling get_resource-type on $this->smtp_conn) seems likely to be a good starting point.

[Krapulat]

class-smtp.php uses library PHPMailer. So the problem is with PHPMailer?

[andrewmclagan]

+1 this makes HHVM unusable for Laravel developers

[fredemmott]

@andrewmclagan : this issue is fixed. If you are still having a problem with Laravel, please file a new issue with details - HHVM version, what PHP functionality is not working (i.e. which PHP functions, not which parts of laravel), and so on.

[andrewmclagan]

apologies, i pulled an old version