Hi Janusz and the users above,

The openssl_verify() call is specifically to the OpenSSL library, so if this is not installed correctly, or is not enabled as an extension in php (i.e. extension=php_openssl.dll ) then 'includes/packages.inc' will fail at the function call.

Also, I've had lots of trouble getting OpenSLL running with IIS - basically down to version conflicts.  If the OpenSSL dll's and php-cgi conflict, or are not found in the right path/environment settings, this will also cause php errors and you get the type of 'webpage not available' errors mentioned in the first couple of posts of this topic.  If the windows application event log shows php-cgi errors once 'extension=php_openssl.dll' has been added to php.ini, following a 'web page not available' error, then openSSL is definitely not set up correctly.

I'd suggest to the users above to go through OpenSSL setup with a fine toothcombe, and ensure that a call to phpinfo() lists openSSL as enabled - if not FA will fail due to the explicit function call.

For those not familiar with openSSL, I'd recommend starting at openSSL.org and following the binaries link for the windows install - if you've done this and are having problems with the latest version then revert to 0_9_8v .  Also if on a Windows platform ensure that the enviroment variable OPENSSL_CONF points to a valid cfg file and that the PATH has 'drive:openssl\bin\' directory in it correctly.  Always restart IIS/ reboot, to ensure environment variable changes have an affect.

Hope that helps :-)

For those struggling with a Windows install:

The bug causing the 'constant login' in IIS is fixed by replacing '$secure=null' with '$secure=false' in line 15 of session.inc, so should be:

function sessionStart($name, $limit = 0, $path = '/', $domain = null, $secure = false)