error:0A000126:SSL routines::unexpected eof while reading in php

[msalik42]

I have built a website in PHP using the YII2 framework. When I use file_get_contents($requestUrl, false, stream_context_create($arrContextOptions)) then i am getting error saying error:0A000126:SSL routines::unexpected eof while reading I have also tried to enable the legacy provider by editing the openssl.cnf file, but got no success. Reference: https://gist.github.com/rdh27785/97210d439a280063bd768006450c435d

Here is the screenshot

Server: Nginx (nginx/1.18.0)
OS: Ubuntu 22.04 LTS
PHP: 7.4.29
Openssl: 1.1.1d

[beldmit]

It has nothing to do with legacy provider. SSL_OP_IGNORE_UNEXPECTED_EOF is the corresponding flag to ignore this error, see https://www.openssl.org/docs/man3.0/man3/SSL_CTX_set_options.html for more information

[jessuppi]

This error is popping up all over GitHub and StackOverflow, I don't know why this issue is marked "resolved"... it seems there is a bug in OpenSSL that requires upgrading and/or downgrading packages, and/or rebooting.

Ref: curl/curl#5138
Ref: https://stackoverflow.com/questions/72627218/
Ref: https://stackoverflow.com/questions/60888230/

...among several other threads.

It seems to happen in both 1.1.1d and 1.1.1e, possibly other versions.

Edit: this comment seems relevant:

Yes, it's a probably a bad server that closes a connection abruptly. But these servers are quite common, see also curl/curl#4409. It was fixed with curl/curl#4623 , but openssl changed behavior with 1.1.1e and doesn't return SSL_ERROR_SYSCALL, but SSL_ERROR_SSL now and errors are back in different form.

P.S. Rumors are that 1.1.1f (v3.0.x) fixes this issue but I just came across it on Ubuntu 22.04 and OpenSSL 3.0.2 so I'm not sure if this was ever truly resolved or not.

[t8m]

Not rumors but facts:

1.1.1f reverted the behavior the error is reported. The error is really an error of the peer.

3.0.x requires the application to set the SSL_OP_IGNORE_UNEXPECTED_EOF to ignore the error.

[SalihSyr]

Can anyone show me how to set the SSL_OP_IGNORE_UNEXPECTED_EOF to the ssl.h ?

[t8m]

The application has to set it. It has to call SSL_CTX_set_options(ctx, SSL_OP_IGNORE_UNEXPECTED_EOF);

[SalihSyr]

I added the function but it still doesn't work.

[t8m]

You're editing an OpenSSL header file, not modifying the application calling the OpenSSL. Anyway, this should be done by the application developer, not by user.

[SalihSyr]

Oh I got it. Well when I downgraded it to an older version of openssl it still didn't work.

Do you know a version where it deffinetly won't make problems?

[t8m]

Use the latest 1.1.1 release (1.1.1q).