Edit Report a Bug

    Интернет-сокеты: TCP, UDP, SSL и TLS

    ssl://, tls://, sslv2:// & sslv3://.

    Замечание: Если транспортный протокол не указан, будет использован tcp://.

    • 127.0.0.1
    • fe80::1
    • www.example.com
    • tcp://127.0.0.1
    • tcp://fe80::1
    • tcp://www.example.com
    • udp://www.example.com
    • ssl://www.example.com
    • sslv2://www.example.com
    • sslv3://www.example.com
    • tls://www.example.com

    Интернет-сокеты требуют указания порта в дополнение к адресу. В случае fsockopen(), порт передаётся вторым параметром и не затрагивает строку адреса. При работе с stream_socket_client() и другими близкими функциями, как и в случае со стандартными URL, порт указывается в конце адреса, отделённый двоеточием.

    • tcp://127.0.0.1:80
    • tcp://[fe80::1]:80
    • tcp://www.example.com:80

    Замечание: IPv6 численные адреса с указанием порта
    Во втором примере выше, в то время как IPv4 и имя хоста не изменились, за исключением добавления номера порта после двоеточия, адрес IPv6 заключён в квадратные скобки: [fe80::1]. Это сделано для того, чтобы отличить двоеточие в адресе от двоеточия при указании порта.

    Протоколы ssl:// и tls:// (доступны, только если поддержка openssl включена в PHP) являются расширениями tcp://, дополняющими его SSL-шифрованием.

    ssl:// будет пытаться использовать соединение SSL V2 или SSL V3, в зависимости от возможностей и настроек удалённого хоста. sslv2:// и sslv3:// позволяют явно указать использование SSL V2 или SSL V3.

    add a note add a note

    User Contributed Notes 4 notes

    up
    14
    christian at lantian dot eu
    11 years ago
    @pablo dot livardo  :  I think that the problem you found is caused by the difference between the client/server encryption methods used.

    The 465 port is used for SMTPS, and the server starts the encryption immediately it receives your connection. So, your code will work.

    The 587 port is used for Submission (MSA or Mail Submission Agent) which works like the port 25. The server accepts your connection and doesn't activate the encryption. If you want an encrypted connection on the port 587, you must connect on it without encryption, you must start to dialog with the server (with EHLO) and after that you must ask the server to start the encrypted connection using the STARTTLS command. The server starts the encryption and now you can start as well the encryption on your client.

    So, in few words, you can not use :

    <?php $fp = fsockopen("tls://mail.example.com", 587, $errno, $errstr);  ?> 

    but you can use:

    <?php $fp = stream_socket_client("mail.example.com:587", $errno, $errstr); ?> 

    and after you send the STARTTLS command, you can enable the crypto:

    <?php stream_socket_enable_crypto($fp, true, STREAM_CRYPTO_METHOD_SSLv23_CLIENT); ?>

    P.S. My previous note on this page was totally wrong, so I ask the php.net admin to remove it.

    :)
    up
    6
    stefan at example dot com
    14 years ago
    Actually, PHP is very able to start with an unencrypted connection and then switch to an encrypted one - refer to http://php.net/stream_socket_enable_crypto .
    up
    -9
    christian at lantian dot eu
    11 years ago
    @pablo dot livardo  :  I think that the problem you found is caused by the difference between the client/server encryption methods used.

    You tried to access the port 587 using TLS encryption, but the server uses the SSLv3 encryption on this port.

    You can communicate with the Google server on port 465 because on this port the communication is encrypted using TLS and your client is configured to recognize the TLS.

    So, if you want to connect on the Google server over the port 587, you simply must write:

    <?php
    $fp     = fsockopen("ssl://mail.example.com", 587, $errno, $errstr);
    ?>

    instead of:

    <?php
    $fp     = fsockopen("tls://mail.example.com", 587, $errno, $errstr);
    ?>

    :)
    up
    -10
    pablo dot livardo at gmail dot com
    14 years ago
    I've been having a problem with a TLS connection.

    <?php
    $fp     = fsockopen("tls://mail.example.com", 587, $errno, $errstr);
    ?>

    Which gives me an error of:

    SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

    I believe this is caused by PHP not being able to start with an unencrypted connection and then switch to encryption even though the functionality is built into OpenSSL.

    For Google Mail users you can avoid this by using port 465 instead of 587.
    add a note add a note
    To Top