ci: xfail bug74796 and fix README for expired openssl certs

morrisonlevi · claude · morrisonlevi · commit 7f31357a08dd · 2026-04-06T20:29:35.000-06:00
Add bug74796.phpt to 8.3-8.5 xfail lists (same expired cert root cause
as sni_server tests). Also update README to include it and drop
inaccurate wording.

Co-Authored-By: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/dockerfiles/ci/xfail_tests/8.3.list b/dockerfiles/ci/xfail_tests/8.3.list
@@ -77,6 +77,7 @@ ext/openssl/tests/peer_verification.phpt
 ext/openssl/tests/san_peer_matching.phpt
 ext/openssl/tests/sni_server.phpt
 ext/openssl/tests/sni_server_key_cert.phpt
+ext/openssl/tests/bug74796.phpt
 ext/openssl/tests/session_meta_capture.phpt
 ext/openssl/tests/session_meta_capture_tlsv13.phpt
 ext/openssl/tests/stream_crypto_flags_001.phpt
diff --git a/dockerfiles/ci/xfail_tests/8.4.list b/dockerfiles/ci/xfail_tests/8.4.list
@@ -80,6 +80,7 @@ ext/openssl/tests/peer_verification.phpt
 ext/openssl/tests/san_peer_matching.phpt
 ext/openssl/tests/sni_server.phpt
 ext/openssl/tests/sni_server_key_cert.phpt
+ext/openssl/tests/bug74796.phpt
 ext/openssl/tests/session_meta_capture.phpt
 ext/openssl/tests/session_meta_capture_tlsv13.phpt
 ext/openssl/tests/stream_crypto_flags_001.phpt
diff --git a/dockerfiles/ci/xfail_tests/8.5.list b/dockerfiles/ci/xfail_tests/8.5.list
@@ -81,6 +81,7 @@ ext/openssl/tests/peer_verification.phpt
 ext/openssl/tests/san_peer_matching.phpt
 ext/openssl/tests/sni_server.phpt
 ext/openssl/tests/sni_server_key_cert.phpt
+ext/openssl/tests/bug74796.phpt
 ext/openssl/tests/session_meta_capture.phpt
 ext/openssl/tests/session_meta_capture_tlsv13.phpt
 ext/openssl/tests/stream_crypto_flags_001.phpt
diff --git a/dockerfiles/ci/xfail_tests/README.md b/dockerfiles/ci/xfail_tests/README.md
@@ -242,9 +242,9 @@ Disabled on versions: `8.1+`.
 
 This test checks PHP's handling of excessively large QName prefix in SoapVar (a stress test for edge cases). With ddtrace loaded, the additional memory overhead causes the test to be killed before it can complete, due to hitting memory limits during the stress test.
 
-## `ext/openssl/tests/sni_server.phpt`, `ext/openssl/tests/sni_server_key_cert.phpt`
+## `ext/openssl/tests/sni_server.phpt`, `ext/openssl/tests/sni_server_key_cert.phpt`, `ext/openssl/tests/bug74796.phpt`
 
-Disabled on all versions.
+Disabled on all versions (where present).
 
-The bundled test certificates (`sni_server_*.pem`) expired on 2026-04-02. The TLS handshake fails because the client rejects the expired server certificates, causing `stream_socket_client` to return `false`. PHP 8.2–8.5 are the maintained branches and should receive a fix once upstream regenerates the certificates; remove the xfail entries for those versions when they do.
+The bundled test certificates expired on 2026-04-02. The TLS handshake fails because the client rejects the expired server certificates, causing `stream_socket_client` to return `false`.
 
