Test oath service's openssl function usage for safe useage

[phavekes]

This issue is imported from pivotal - Originaly created at Nov 16, 2021 by Michiel Kodde

Several (sometimes treacherous) openssl functions are used in the oath-service-php component. As the return type of openssl functions is not always predictable, we should check usage of these functions as a defence in depth measure. Currently the following usages where found:

            src/oath-service-php/src/SURFnet/OATHBundle/Services/OATH  (1 usage found)
                RandomGenerator.php  (1 usage found)
                    32 return openssl_random_pseudo_bytes($length);
            src/oath-service-php/src/SURFnet/OATHBundle/Services/UserStorage/Encryption  (6 usages found)
                Openssl.php  (6 usages found)
                    47 $ivsize = openssl_cipher_iv_length($this->method);
                    48 $iv = openssl_random_pseudo_bytes($ivsize);
                    50 $ciphertext = openssl_encrypt(
                    54 OPENSSL_RAW_DATA,
                    72 return openssl_decrypt(
                    76 OPENSSL_RAW_DATA,