安装

要使用 PHP 的 OpenSSL 支持，你应该使用--with-openssl[=DIR] 参数来编译PHP.

OpenSSL 库还在运行时对正常操作有额外的要求。最明显的是，OpenSSL需要访问随机或伪随机数生成器; 在大多数 Unix 和类 Unix 平台上(包括linux),意味着它必须要访问 /dev/urandom 或者 /dev/random 设备。

Note: Win32 平台的用户请注意

为了使此扩展生效， DLL 文件必须能在 Windows 系统的 PATH 指示的路径下找到。如何操作的信息，请参见题为"如何在 Windows 中将 PHP 目录加到 PATH 中"的FAQ。虽然将 DLL 文件从 PHP 文件夹复制到 Windows 系统目录也行，但不建议这样做。 此扩展需要下列文件在 PATH 路径中： libeay32.dll

此外，如果打算使用密钥生成和证书签名功能，你需要在你的系统上安装一个可用的 openssl.cnf 文件。在我们的 win32 二进制发行版本中，我们已经包含了一个示例配置文件，在 extras/openssl 文件夹中。

PHP 将会使用如下逻辑搜索 openssl.cnf 文件:

如果 OPENSSL_CONF 环境变量设置了，该变量将会被当作配置文件的路径（含文件名）。

如果 SSLEAY_CONF 环境变量设置了，该变量将会被当作配置文件的路径（含文件名）。

假设openssl.cnf 文件将会在 openssl DLL 被编译时配置的默认证书区域被找到。这通常意味着默认的文件名是 c:\usr\local\ssl\openssl.cnf.

在你的安装过程中，你需要决定是否将配置文件安装在c:\usr\local\ssl\openssl.cnf 或者使用环境变量(可能是基于每个虚拟主机的基础)来定位配置文件安装到其他地方。注意，可以使用引入配置文件的函数中的 configargs 参数来覆盖脚本中的默认路径。

User Contributed Notes

Anonymous 12-Jan-2020 03:22


This is for those upgrading from PHP 5 to 7 on windows and are trying to make Curl work. Hopefully it saves you the hours I spent finding my mistake. You might have done the thing this documentation tells you not to. 



So I followed the documentation to set up Curl with PHP 7.3, however Apache kept giving me the standard "The specified procedure could not be found.)" error. The dlls were in place and the path to php directory was there, I even copied them to Apache's bin directory and still no luck. However, when I ran PHP from command line there were no errors. Not sure if these two were linked, however, I noticed that the required dlls (ssleay32.dll, libssh2.dll, libeay32.dll) were located in multiple directories, including the windows/system32 (the big no no). During PHP 5 installation (back in the day) I had copied these over to make my life easy. Well it was culprit. As soon as I removed these files from the system32 directory, CURL loaded fine. I believe it was because there was DLL mismatch from those in my php directory and in the windows/system32 as both are in Windows path. I hope this saves someone the time. Lesson: when something is not recommended by these docs, just don't do it.

vitoandre.doria 21-Jun-2018 06:31


As pointed out here http://php.net/manual/de/reserved.variables.environment.php#98113 make sure that variables_order = "EGPCS" is set in your php.ini (might come without the E flag which means ignore Env variables) otherwise PHP will ignore your Environment variables. This should be part of the documentation btw...

woodongwong at gmail dot com 07-May-2018 06:33


php5.6 not support OpenSSL version 1.1 and above? I had to install another 1.0 version in Debian 9 to install successfully.

epos_jk 27-Nov-2017 04:26


You dont need to copy files to use OpenSSL with Apache 2.4 - use the LoadFile directive in your apache config file instead:

e.g.

LoadFile "C:/php7/libcrypto-1_1-x64.dll"

LoadFile "C:/php7/libssl-1_1-x64.dll"

LoadFile "C:/php7/libssh2.dll"

epos_jk 27-Nov-2017 04:23


Beginning with version 1.1.0 OpenSSL did change their libary names!

libeay32.dll is now libcrypto-*.dll (e.g. libcrypto-1_1-x64.dll for OpenSSL 1.1.x on 64bit windows)

ssleay32.dll is now libssl-*.dll (e.g. libssl-1_1-x64.dll for OpenSSL 1.1.x on 64bit windows)

ian_channing at hotmail dot com 21-Sep-2016 08:39


If you install OpenSSL using the php-5.2.13-nts-x86.msi installer that installs `ssleay32.dll` and `libeay32.dll` into the PHP directory alongside php.ini (as well as installing the extension to the ext directory and adding an extension config to the `php.ini` file).



This is the simple way to ensure that those files are in the path as the PHP directory should already be in your path.

anrdaemon at freemail dot ru 08-Nov-2014 11:16


If you want to configure Apache2 under Windows to use OpenSSL - please, for the love of God, do NOT copy around, or even worse - overwrite any DLL's.

First, modern Apache2 is shipped with relevant libraries, second - even if, for some reason, it can't find the right now - you can TELL it to use the right ones.

LoadLibrary.

Yes.

That simple.



LoadLibrary C:/apache2/bin/libeay32.dll

LoadLibrary C:/apache2/bin/ssleay32.dll

LoadLibrary C:/php5/php5ts.dll

LoadModule php5_module C:/php5/php5apache2_4.dll

jaimz at vertigolabs dot org 13-Oct-2014 04:10


I just wanted to point out that when you compile with openssl and you're specifying a directory, the acinclude.m4 and aclocal.m4 use that directory as such:



{your directory}/includes/openssl/{headerfile}



That being said, you want to specify the directory that the includes directory is in, not the specific directory with the header files.



THIS IS WRONG --with-openssl=/usr/local/includes/openssl 

THIS IS RIGHT --with-openssl=/usr/local

Alan 11-Oct-2011 11:14


Having recently installed Apache2.2 with PHP 5.2.17 on my Windows 7 development machine, I want to pass along my findings about how to set things up to load the correct versions of the OpenSSL DLLs. Many people have posted elsewhere about the "DLL Hell" that results if the a wrong version is loaded.



First, install Apache 2.2 and check its operation, then download the Windows binaries for PHP from http://windows.php.net/download/. Note that according to the sidebar on that page the recommended version of PHP for use with Apache2 is currently 5.2.17, even though it is back level. Plus, this version comes with all the DLLs you need to use OpenSSL -- no need to recompile as the old PHP man page suggests.



Having verified the PHP installation, turn on the OpenSSL support by uncommenting the line



extension=php_openssl.dll



in php.ini, which you will find in the PHP directory (I'll assume you made that c:/PHP). Next check the location of php_openssl.dll, which you should find in c:/PHP/ext. Also in php.ini find the key extension_dir, and change its value to c:/php/ext. Next, put this location on the end of your PATH (there's no need to reboot).



At this point, when you start Apache it will attempt to load php_openssl.dll, but if your setup is anything like mine you will see an error. I prefer to start Apache manually, and the error appears in a dialog box: "The ordinal 4114 could not be located in the dynamic link library LIBEAY32.dll". (I'm not sure whether you would get this message if you started Apache as a service). The Apache log also contains an error message saying that php_openssl.dll cannot be loaded, though that message doesn't name libeay32.dll. Welcome to DLL Hell.



Libeay32.dll enters the picture because php_openssl.dll depends on it (and also on ssleay32.dll). What I think happens is that Apache first tries to load php_openssl.dll programmatically from the path specified by the extension_dir key. But then, the loading of the so-called dependent DLLs is left to Windows' default mechanism. If Windows finds an incompatible version of a dependent DLL, you get the error.



So clearly the fix is to ensure that the correct version of libeay32.dll is loaded. On my machine, at least three other processes have loaded various versions of this same DLL. They include the Mozy backup client, Windows Explorer (because Mozy installs support in Explorer) and the OpenOffice suite. My machine is quite different in this respect from a dedicated server on which one probably wants as few extraneous processes as possible.  Presumably on a server one can follow advice that suggests copying the dlls to the system32 directory, for example. But I'm not about to mess with my other programs by making system-wide changes.



So what to do? I didn't find the available information on how Windows searches for DLLs to be very useful, mainly because I didn't understand it. But it does say that the first place Windows looks is "The directory from which the application loaded." 



To cut to the chase, after a lot of experimentation I came to a key realization -- "the application" is APACHE, not PHP. So I copied libeay32.dll to the Apache2.2/bin directory. Problem solved. No error messages and running phpinfo confirms that OpenSSL is present and enabled.



Good luck, and stay out of DLL Hell.

Fernando rubio 05-Jun-2011 11:20


OpenSSL and IIS



Open php.ini

uncomment the following:

extension=php_openssl.dll



Make sure you have config the following section pointing to your php install directory (in my case is located in a second partition at e:\php) (very recommended practice)



; Directory in which the loadable extensions (modules) reside.

extension_dir = "e:/php/ext"



Add your php directory to the PATH variable



start>run>type cmd

on windows console type:

set PATH=%PATH%;e:\php

(remember replace e:\php with YOUR directory)

(note that using %path% is the same as var+=value, so the directory will be appended at the end of the variable)



php5 come with all the dll in the zip package so if you add the php directory to the path variable, you don't need to move anything to your windows system directory (very safe for later updates, because you just replace the content of your php directory)



After all these step you ready.. but of course you need to restart your IIS to apply changes, so



start>run>inetsrv/iis.msc

right click on your computer

all task>restart IIS



done!

Kathryn Sharron at CSUN 19-Feb-2009 02:40


I followed all of the instructions above to install on Windows and *still* couldn't get "OpenSSL support     enabled" from phpinfo(). The answer turned out to be in my php.ini file:



; Directory in which the loadable extensions (modules) reside.

extension_dir = "./"



I found php_openssl.dll in my /ext directory. I copied it up to the same directory as php.ini, but I expect that editing the extension_dir value would work too.

mtudor AT icefusion remove me DOT co uk 24-Oct-2008 04:52


SYMPTOMS AND SETUP

------------------



For anyone having problems enabling the PHP openssl extension on WINDOWS.



I uncommented:  extension=php_openssl.dll  and installed the latest versions of ssleay.dll and libeay.dll in <windows>\system32.



When I restarted my web server and examined phpinfo(), there was no "openssl" headed section (although there were references to openssl in other sections).



I also found this error in my web server logs (<apache dir>/logs/ssl.log and <apache dir>/logs/access.log).



PHP Warning:  PHP Startup: Unable to load dynamic library 'C:\\Program Files\\PHP\\ext\\php_openssl.dll' - The operating system cannot run %1.\r\n in Unknown on line 0



I have PHP 5.2.6 running on Apache 2.2.3 for Windows. 



CAUSE

-----



This was caused by PHP picking up the WRONG VERSIONS of libeay.dll and ssleay.dll, which were present in multiple locations on my computer.



When any application attempts to use a dll file in windows, the system searches for this file using the following order:

   1. The directory from which the application loaded.

   2. The windows\system32 directory.

   3. The windows\system directory.

   4. The windows directory.

   5. The current directory.

   6. The directories that are listed in the PATH environment variable.



   (http://msdn.microsoft.com/en-us/library/ms682586.aspx)



For PHP running under Apache, the application directory is <apache dir>\bin and NOT <php dir>.  PHP was finding OUT OF DATE versions of libeay.dll and ssleay.dll in <apache dir>\bin (probably installed when I enabled SSL support in my web server).  Because of this, the latest versions in windows\system32 were never reached.



NOTE: Although my problem was caused by an Apache2 specific configuration, I can imagine others might face this problem if, say, they install the openssl dlls in the PHP directory and add this directory to the PATH.  I haven't checked it but I would imagine if another directory in the path contains outdated openssl dlls and this is listed before the PHP directory, a similar situation would occur.



SOLUTION

--------



Either replace the dlls in the first location on the search order, or, as I did, you can install the latest openssl dlls in the the windows system32 directory and just rename to .old the ssleay.dll and libeay.dll files in the search order locations before windows\system32.



Hope that helps others who might be stuck with this.



Mark.