support for FastCGI over TLS
@bukka arbeitet bereits daran.
Seit 05.2.2024.
- Vorherrschende Sprache
- C
- Sterne
- 40.4k
- Forks
- 8.2k
- Ø Merge
- 2 T. 13 Std.
- Gemergte PRs (30 T.)
- 96
Beschreibung
Description
Currently, php-fpm supports UNIX and TCP socket operation. However, to enhance security (and privacy of data in transit) it might be useful to also have an option for a TLS socket, ideally mTLS, additional to TCP for remote connections.
In such cases, it is already possible to use transparent transport encryption (VPN, or a TLS-tunnel), but php-fpm wouldn't have an idea about it. With integrated TLS support, information from the TLS session (e.g. X.509 attributes) could be used to populate "allowed_clients" or php-fpm's ENV to control further behavior.
Since (optional) OpenSSL support is already present in PHP, it should be relatively trivial to also support a TLS listener - with a bit more work for mTLS and actually making use of TLS session information.
Beitragsleitfaden
Erste Schritte
- Lies das ganze Issue und danach den Beitragsleitfaden des Projekts.
- Schreib ins Issue, dass du es übernimmst — das erspart doppelte Arbeit.
- Forke das Repository und arbeite in einem Branch.
- Öffne einen Pull Request, der die Issue-Nummer nennt.
Bewertung
Dieses Issue wurde noch nicht bewertet.