Req #68074 [Asn->Csd]: Use system cipher list instead of hardcoded value

Edit report at https://bugs.php.net/bug.php?id=68074&edit=1 ID: 68074 Updated by: remi@php.net Reported by: remi@php.net Summary: Use system cipher list instead of hardcoded value -Status: Assigned +Status: Closed Type: Feature/Change Request Package: OpenSSL related Operating System: Fedora 21+ PHP Version: Irrelevant Assigned To: remi Block user comment: N Private report: N New Comment: Automatic comment on behalf of remi Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value Previous Comments: ------------------------------------------------------------------------ [2014-09-22 15:53:53] remi@php.net The following patch has been added/updated: Patch Name: system-ciphers.patch Revision: 1411401232 URL: https://bugs.php.net/patch-display.php?bug=68074&patch=system-ciphers.patch&revision=1411401232 ------------------------------------------------------------------------ [2014-09-22 15:53:00] remi@php.net Description: ------------ In PHP 5.6, openssl change introduce a harcoded cipher list https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers This is fine when system is badly configured. But this kill security system management. Especially, Fedora 21 plan to change Crypto policy See: Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies Proposal: allow, at build time to use system cipher list instead of hardcoded value. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68074&edit=1