瀏覽代碼

Merge pull request #7649 from aragon999/bugfix/fix-detection-of-supported-ssl-algos

Use a case insenstive method to check that SHA384 is a supported openssl algorithm
Jordi Boggiano 6 年之前
父節點
當前提交
7e2e231899
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      src/Composer/Command/SelfUpdateCommand.php

+ 1 - 1
src/Composer/Command/SelfUpdateCommand.php

@@ -220,7 +220,7 @@ TAGSPUBKEY
 
             $pubkeyid = openssl_pkey_get_public($sigFile);
             $algo = defined('OPENSSL_ALGO_SHA384') ? OPENSSL_ALGO_SHA384 : 'SHA384';
-            if (!in_array('SHA384', openssl_get_md_methods())) {
+            if (!in_array('sha384', array_map('strtolower', openssl_get_md_methods()))) {
                 throw new \RuntimeException('SHA384 is not supported by your openssl extension, could not verify the phar file integrity');
             }
             $signature = json_decode($signature, true);