Openssl: openssl_x509_verify() certificate signature check (#6595)

[PurHur]

Summary

• Implement openssl_x509_verify() on VM via libcrypto FFI (X509_verify, X509_get_pubkey) in ext/openssl/VmOpensslX509Native.php — php-src ext/openssl/x509.c.
• Accept OpenSSLCertificate|string cert and OpenSSLAsymmetricKey|OpenSSLCertificate|string public key; enum operands raise TypeError.
• Register builtin + compliance guard; sync spine/bootstrap inventory for ext/openssl/openssl_x509_verify.php.

php-src reference

• ext/openssl/x509.c — PHP_FUNCTION(openssl_x509_verify)

Verification

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && php bin/vm.php -r "echo function_exists(\"openssl_x509_verify\")?\"yes\":\"no\";"'
# yes

./script/docker-exec.sh -- bash -lc 'source script/php-env.sh && ./vendor/bin/phpunit --filter openssl_x509_verify'
# OK (2 tests, 2 assertions)

./script/docker-exec.sh -- bash -lc 'php script/check-selfhost-spine-coverage-sync.php && php script/bootstrap-inventory.php --check'
# OK 4742/4742

./script/ci-fast.sh
# exit 0

Closes #6595

Made with Cursor