Req #68074 [NEW]: Use system cipher list instead of hardcoded value

From: Date: Mon, 22 Sep 2014 15:53:01 +0000
Subject: Req #68074 [NEW]: Use system cipher list instead of hardcoded value
Groups: php.bugs 
Request: Send a blank email to php-bugs+get-187659@lists.php.net to get a copy of this message
From: remi Operating system: Fedora 21+ PHP version: Irrelevant Package: OpenSSL related Bug Type: Feature/Change Request Bug description:Use system cipher list instead of hardcoded value Description: ------------ In PHP 5.6, openssl change introduce a harcoded cipher list https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers This is fine when system is badly configured. But this kill security system management. Especially, Fedora 21 plan to change Crypto policy See: Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies Proposal: allow, at build time to use system cipher list instead of hardcoded value. -- Edit bug report at https://bugs.php.net/bug.php?id=68074&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=68074&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=68074&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=68074&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=68074&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=68074&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=68074&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=68074&r=needscript Try newer version: https://bugs.php.net/fix.php?id=68074&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=68074&r=support Expected behavior: https://bugs.php.net/fix.php?id=68074&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=68074&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=68074&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=68074&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=68074&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=68074&r=dst IIS Stability: https://bugs.php.net/fix.php?id=68074&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=68074&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=68074&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=68074&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=68074&r=mysqlcfg

« previous php.bugs (#187659) next »