Bug #73388 [NEW]: STREAM_CRYPTO_METHOD_TLS_CLIENT restricted to TLS1.0 only

From: arjen at parse dot nl Operating system: Linux PHP version: 7.0.12 Package: OpenSSL related Bug Type: Bug Bug description:STREAM_CRYPTO_METHOD_TLS_CLIENT restricted to TLS1.0 only Description: ------------ In 5.6 some openssl improvements were made: http://php.net/manual/en/migration56.openssl.php The changelog mentions STREAM_CRYPTO_METHOD_TLS_CLIENT as constant for any TLS version. Because of BC, this was reverted in https://bugs.php.net/bug.php?id=69195 STREAM_CRYPTO_METHOD_TLS_CLIENT is now TLSv1.0 only, while STREAM_CRYPTO_METHOD_SSLv23_CLIENT = STREAM_CRYPTO_METHOD_TLSv1_0_CLIENT|STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT|STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT (see http://php.net/manual/en/function.stream-socket-enable-crypto.php#119122) We started using the STREAM_CRYPTO_METHOD_TLS_CLIENT constant with 5.6.0 and now found out we couldn't connect to a service only supporting TLS v1.1 and v1.2 So by following the changelog and using a TLS_CLIENT specific constant, we ended up in a situation with WORSE TLS version support... A quick search on github on STREAM_CRYPTO_METHOD_TLS_CLIENT language:PHP returns 207,607 occurrences, while STREAM_CRYPTO_METHOD_SSLv23_CLIENT returns 28,956 results. Solution: STREAM_CRYPTO_METHOD_TLS_CLIENT should also enable STREAM_CRYPTO_METHOD_TLSv1_1_CLIENT|STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT -- Edit bug report at https://bugs.php.net/bug.php?id=73388&edit=1 -- Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=73388&r=trysnapshot54 Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=73388&r=trysnapshot55 Try a snapshot (trunk): https://bugs.php.net/fix.php?id=73388&r=trysnapshottrunk Fixed in SVN: https://bugs.php.net/fix.php?id=73388&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=73388&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=73388&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=73388&r=needscript Try newer version: https://bugs.php.net/fix.php?id=73388&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=73388&r=support Expected behavior: https://bugs.php.net/fix.php?id=73388&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=73388&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=73388&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=73388&r=globals PHP 4 support discontinued: https://bugs.php.net/fix.php?id=73388&r=php4 Daylight Savings: https://bugs.php.net/fix.php?id=73388&r=dst IIS Stability: https://bugs.php.net/fix.php?id=73388&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=73388&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=73388&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=73388&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=73388&r=mysqlcfg