Req #76420 [NEW]: tls version change
| From: | 24dnlj6zphz at brukerfeil dot eu | Date: | Wed, 06 Jun 2018 13:54:04 +0000 |
| Subject: | Req #76420 [NEW]: tls version change | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-215519@lists.php.net to get a copy of this message | ||
From: 24dnlj6zphz at brukerfeil dot eu
Operating system: *
PHP version: Next Major Version
Package: OpenSSL related
Bug Type: Feature/Change Request
Bug description:tls version change
Description:
------------
TLS-versions prior to TLS 1.2 contain security issues and are
deprecated.
All major cloud providers are now also disabling older versions
The default ssl method when not specified by client code in PHP is
sslv2/3.
This opens up for security issues and also breaks tls-servers that no
longer support old versions.
I suggest changing the default tls version to 1.2.
I have attached a patch, but I'm not 100% sure it is correct.
--
Edit bug report at https://bugs.php.net/bug.php?id=76420&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=76420&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=76420&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=76420&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=76420&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=76420&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=76420&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=76420&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=76420&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=76420&r=support
Expected behavior: https://bugs.php.net/fix.php?id=76420&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=76420&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=76420&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=76420&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=76420&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=76420&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=76420&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=76420&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=76420&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=76420&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=76420&r=mysqlcfg