Making a connection in PHP using TLS

Question

I wrote a small SIP client for a special purpose. Basically it connects to port 5060 using function fsockopen()

$fp = fsockopen("10.0.0.1", 5060, $errno, $errstr, 30);

and then basically reads and writes SIP commands using fread() and fwrite().

Now my SIP service operator wants us clients to use SIPS which is basically SIP over TLS. I've spent hours looking for information on how to connect to a port with TLS using PHP but without any success. Apparently the fsockopen() supports TLS to an extent but when I replaced the above with:

$fp = fsockopen("tls://10.0.0.1", 5061, $errno, $errstr, 10);

I get nothing. I can connect to the server from my shell with with OpenSSL client:

$ openssl s_client -connect 10.0.0.1:5061

And I can communicate with the SIP server through that connection without problems. OpenSSL support is compiled in the PHP.

My problem is that I can't set up the TLS connection with the server in PHP. I noticed in some forums that in older versions of PHP it was possible to build and use the SSL context with fsockopen() but apparently not anymore, since I get an error about too many parameters.

I also tried using stream_context_create() with stream_context_set_option() but I get no replies from the server:

$context = stream_context_create();
$result=stream_context_set_option($context, 'ssl', 'verify_peer', 'TRUE');
$result=stream_context_set_option($context, 'ssl', 'cafile', 'cert.cer');
$result=stream_context_set_option($context, 'ssl', 'verify_depth', '5');

$fp = stream_socket_client('tls://'.$host.':'.$port, $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $context);

but I still can't get any replies or errors from the server. What is the recommended and working way of using TLS in PHP?

James Brown · Accepted Answer · 2014-02-08 12:15:13Z

3

This is enough to open a TLS connection:

$context = stream_context_create();

$fp = stream_socket_client('tls://'.$host.':'.$port, $errno, $errstr, 30, STREAM_CLIENT_CONNECT, $context)

if the certificates are in their place. If they are not, follow the instructions linked by Filippos.

answered Feb 8, 2014 at 12:15

James Brown

6731 gold badge7 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

James Brown Over a year ago

Btw, if you are implementing a TLS (or SSL) connection in PHP, stream_set_timeout won't work (I'm running PHP 5.4.4 from the CLI). I ended up using stream_select as a work-around.

yasirmturk Over a year ago

how to provide cert and password?

Ja͢ck · Accepted Answer · 2014-01-29 13:49:11Z

2

I think some of your options are wrong for validating self signed certificates; the following should be enough to make it work:

$context = stream_context_create([
  'ssl' => [
    'verify_peer' => true,
    'allow_self_signed' => true,
    'local_cert' => 'cert.cer',
  ],
]);

answered Jan 29, 2014 at 13:49

Ja͢ck

174k39 gold badges269 silver badges316 bronze badges

Comments

Didit Dwianto · Accepted Answer · 2017-09-26 08:10:48Z

0

I just recently encountered this error, debugging here and there for connection problem or proxy problem, finally found the culprit ... and the solution was to install php-pecl-crypto extension.

My machine is centos 7 using remi-repo for PHP

answered Sep 26, 2017 at 8:10

Didit Dwianto

3261 gold badge3 silver badges6 bronze badges

Comments

Mark Amery · Accepted Answer · 2022-12-03 22:13:51Z

0

You will also need to install the appropriate certificates to get TLS working. Check this SO question for an example of how to use your key files with regular TLS connections.

Also, check the specs of SIPS itself in RFC 5630.

edited Dec 3, 2022 at 22:13

Mark Amery

158k93 gold badges435 silver badges476 bronze badges

answered Jan 29, 2014 at 13:35

Filippos Karapetis

5,20423 silver badges39 bronze badges

Collectives™ on Stack Overflow

Making a connection in PHP using TLS

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

2 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related