openssl_* over node:crypto, synchronously: sign and verify, JWK and PEM keys, AES
encrypt and decrypt, key details, X.509 parsing and ECDH.
Shimming the names PHP already uses makes firebase/php-jwt, Google's auth client and Stripe's
webhook verifier work untouched. node:crypto is synchronous in workerd, so this is an ordinary
bridge, not a deferred one. Not here: openssl_csr_new and the PKCS#7/CMS family (no
primitive); openssl_x509_checkpurpose answers -1 (no trust store).
openssl_*overnode:crypto, synchronously: sign and verify, JWK and PEM keys, AES encrypt and decrypt, key details, X.509 parsing and ECDH.Shimming the names PHP already uses makes
firebase/php-jwt, Google's auth client and Stripe's webhook verifier work untouched.node:cryptois synchronous in workerd, so this is an ordinary bridge, not a deferred one. Not here:openssl_csr_newand the PKCS#7/CMS family (no primitive);openssl_x509_checkpurposeanswers -1 (no trust store).