Req #68074 [PATCH]: Use system cipher list instead of hardcoded value

Edit report at https://bugs.php.net/bug.php?id=68074&edit=1 ID: 68074 Patch added by: remi@php.net Reported by: remi@php.net Summary: Use system cipher list instead of hardcoded value Status: Assigned Type: Feature/Change Request Package: OpenSSL related Operating System: Fedora 21+ PHP Version: Irrelevant Assigned To: remi Block user comment: N Private report: N New Comment: The following patch has been added/updated: Patch Name: system-ciphers.patch Revision: 1411401232 URL: https://bugs.php.net/patch-display.php?bug=68074&patch=system-ciphers.patch&revision=1411401232 Previous Comments: ------------------------------------------------------------------------ [2014-09-22 15:53:00] remi@php.net Description: ------------ In PHP 5.6, openssl change introduce a harcoded cipher list https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers This is fine when system is badly configured. But this kill security system management. Especially, Fedora 21 plan to change Crypto policy See: Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies Proposal: allow, at build time to use system cipher list instead of hardcoded value. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68074&edit=1