[Possible Fix] OpenSSL error: Can't install PHP 7.*, 5.*

[gfreitash]

Summary

It seems that many people are struggling to install older versions of PHP since OpenSSL is now on version 3. And so was I. After some digging I found this (possible) fix to issues like #129, #127, #125 and so on.

This same issue also happens with PHPBrew, and they have a fix for it, as you can see here. To adapt this fix for asdf is not really that hard. The fix involves compiling OpenSSL 1.1 (for php 7.4) from source and then using this locally compiled OpenSSL to execute the asdf php installation.

Fix

First

you should download and compile the OpenSSL's source. For php 7 this should be exactly the same as described in the phpbrew issue, where this fix is from (see below).

cd $HOME
wget https://www.openssl.org/source/openssl-1.1.1i.tar.gz
tar xzf $HOME/openssl-1.1.1i.tar.gz
cd openssl-1.1.1i
./Configure --prefix=$HOME/openssl-1.1.1i/bin -fPIC -shared linux-x86_64
make -j 8 
make install

However, if I'm not wrong, there are at least some version of php 5 that require openssl 1.0.2 to compile properly. In OpenSSL website you can see that versions below and including 1.0.2 are out of support and their usage is discouraged. Nevertheless, you can still get them from here .

Next

you use the fresh compiled openssl to compile php with asdf

export PKG_CONFIG_PATH=$HOME/openssl-1.1.1i/bin/lib/pkgconfig && asdf install php 7.4.30

After that

you may or may not have another error when installing composer. It look something like:

PHP Warning:  copy(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in Command line code on line 1
PHP Warning:  copy(): Failed to enable crypto in Command line code on line 1
PHP Warning:  copy(https://install.phpcomposer.com/installer): failed to open stream: operation failed in Command line code on line 1

There is a fix that involves downloading and applying some certificate. Though it didn't work for me, it might work for you:

Download certificate

# Download certificate http://curl.haxx.se/ca/cacert.pem
wget http://curl.haxx.se/ca/cacert.pem
# Or use the web page to download and upload to linux
mkdir -p /usr/local/openssl/ssl/certs/
mv cacert.pem /usr/local/openssl/ssl/certs/cacert.pem

Modify php.ini

;openssl.capath=
openssl.cafile=/usr/local/openssl/ssl/certs/cacert.pem

What worked for me:
I went into ~/.asdf/plugins/php/bin and removed the last line in install:

install_composer "$ASDF_INSTALL_PATH"

Then, after the installation with export PKG_CONFIG_PATH=$HOME/openssl-1.1.1i/bin/lib/pkgconfig && asdf install php 7.4.30 I manually installed composer globally with

wget -O composer-setup.php https://getcomposer.org/installer
sudo php composer-setup.php --install-dir=/usr/local/bin --filename=composer

In the end

I hope that this can help you to get asdf-php back to its normal functioning.

[brunofunnie]

Nice tips worked like a charm, thanks.

I made some changes because I rather keep all the installs from asdf inside the asdf directory, but they are completely optional, more like a personal taste.

Firstly

I would change the openssl installation directory, since putting all the installation in a "/bin" suffix quite doesn't make sense, for me at least. So:

• Before: $HOME/openssl-1.1.1i/bin
• Then: $HOME/Apps/openssl-1.1.1i
  • I like to organize every piece of manually installed software in a dir called Apps inside my home dir

Secondly

Instead of removing the "install_composer" line I would just comment it and add a new line with:

echo $ASDF_INSTALL_PATH

Last but not least

Then I can take the destination from the last echo command and use it to install composer in the related php directory. Oh and don't forget to change to the php version you've just installed (Added the command below as well)

asdf local php 7.4.30
wget -O ~/Downloads/composer-setup.php https://getcomposer.org/installer
php ~/Downloads/composer-setup.php --install-dir=<path from $ASDF_INSTALL_PATH>/bin --filename=composer
asdf reshim

[DiegoSilva94]

the problem with composer can be solved by changing the php copy by curl

in the install file, look for the install_composer method and replace the line
$bin_path/php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
with this
curl https://getcomposer.org/installer --output composer-setup.php

[ii02735]

@DiegoSilva94 Thank you for your tip ! It helped me 👍
For anyone who has the following problem :

Unable to write keys.dev.pub to: $HOME/.composer

You should do :

mv ~/.composer ~/.composer.old

For a better explanation : https://stackoverflow.com/a/44698089

[99linesofcode]

Is anyone in a position to submit a PR for this? Or perhaps @smorimoto could take a stab at it so that asdf-php can once again be used to install older versions of PHP?

This is actually a build dependency issue and not necessarily the responsibility of someone working on this plugin to fix. It would probably be a good idea to have a discussion on this to determine to what extend this plugin is responsible for installing build dependencies. Especially in these scenario's where operating systems decide to no longer serve these packages from their repositories.

[cocoonkid]

Worked like a charm for me on arch linux!

Thanks so much!!!!!!!!!!

[xvladqt]

Have same problem in arch, fix more easy

pacman -S openssl-1.1
export PKG_CONFIG_PATH=/usr/lib/openssl-1.1/pkgconfig

Install success(with composer)

[zastrixarundell]

Ubuntu 22.04 needed the package: libssl-dev to fix this issue.

[Pablo1Gustavo]

Hi Arch Linux bros, I encountered numerous problems trying to install PHP 7 with asdf. Switching to openssl-1.1 solved a specific error, but then I encountered C compilation errors during the installation. I resolved these by installing some missing libraries:
sudo pacman -S autoconf bison re2c pkg-config libxml2 sqlite zlib curl gd oniguruma postgresql-libs libzip