feat(migration): add graceful handling if openssl_x509_parse not there

Author: mrrobot47

migrations/db/20250927101545_site-command_fix_ssl_flag_for_existing_le_certs.php

@@ -54,31 +54,36 @@ public function up() {
 				if ( empty( $db_ssl ) || $db_ssl !== 'le' ) {
 					// Check if the cert is a valid Let's Encrypt cert using CertificateParser
 					try {
-						$crt_pem       = file_get_contents( $crt );
-						$cert_data     = openssl_x509_parse( $crt_pem );
-						$issuer_full   = isset( $cert_data['issuer'] ) ? $cert_data['issuer'] : [];
-						$issuer_json   = json_encode( $issuer_full );
-						$subject_cn    = isset( $cert_data['subject']['CN'] ) ? $cert_data['subject']['CN'] : '';
-						$crt_pem_lines = implode( ' | ', array_slice( explode( "\n", $crt_pem ), 0, 2 ) );
-						$actions[]     = "Cert issuer: $issuer_json";
-						$actions[]     = "Cert subject CN: '$subject_cn'";
-						$actions[]     = "Cert PEM first lines: $crt_pem_lines";
+						$crt_pem = file_get_contents( $crt );
+						if ( ! function_exists( 'openssl_x509_parse' ) ) {
+							EE::warning( "openssl_x509_parse() not available in PHP. Cannot check issuer for $site_url." );
+							$actions[] = "openssl_x509_parse() not available, skipping Let's Encrypt detection";
+						} else {
+							$cert_data     = openssl_x509_parse( $crt_pem );
+							$issuer_full   = isset( $cert_data['issuer'] ) ? $cert_data['issuer'] : [];
+							$issuer_json   = json_encode( $issuer_full );
+							$subject_cn    = isset( $cert_data['subject']['CN'] ) ? $cert_data['subject']['CN'] : '';
+							$crt_pem_lines = implode( ' | ', array_slice( explode( "\n", $crt_pem ), 0, 2 ) );
+							$actions[]     = "Cert issuer: $issuer_json";
+							$actions[]     = "Cert subject CN: '$subject_cn'";
+							$actions[]     = "Cert PEM first lines: $crt_pem_lines";
 
-						// Check all issuer fields for 'Let's Encrypt'
-						$le_found = false;
-						foreach ( $issuer_full as $field => $value ) {
-							if ( stripos( $value, "Let's Encrypt" ) !== false ) {
-								$le_found = true;
-								break;
+							// Check all issuer fields for 'Let's Encrypt'
+							$le_found = false;
+							foreach ( $issuer_full as $field => $value ) {
+								if ( stripos( $value, "Let's Encrypt" ) !== false ) {
+									$le_found = true;
+									break;
+								}
+							}
+							if ( $le_found ) {
+								EE::log( "Updating SSL flag for site $site_url: found valid Let's Encrypt cert." );
+								$site->site_ssl = 'le';
+								$site->save();
+								$actions[] = "Updated DB: set site_ssl=le (valid LE cert)";
+							} else {
+								$actions[] = "Cert is not from Let's Encrypt, no DB update";
 							}
-						}
-						if ( $le_found ) {
-							EE::log( "Updating SSL flag for site $site_url: found valid Let's Encrypt cert." );
-							$site->site_ssl = 'le';
-							$site->save();
-							$actions[] = "Updated DB: set site_ssl=le (valid LE cert)";
-						} else {
-							$actions[] = "Cert is not from Let's Encrypt, no DB update";
 						}
 					} catch ( \Exception $e ) {
 						EE::debug( "Failed to parse certificate for $site_url: " . $e->getMessage() );