[php-src] Issue #12369: Enable legacy OpenSSL provider by default
| From: | fdelapena | Date: | Fri, 06 Oct 2023 01:21:06 +0000 |
| Subject: | [php-src] Issue #12369: Enable legacy OpenSSL provider by default | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-245508@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/12369
Author: fdelapena
### Description
Since OpenSSL 3, some ciphers are not available unless users configure some openssl.cnf file. This
is not always possible on certain hosting configurations, so allowing this would unbreak
applications depending on this feature.
Today, Windows .p12 files are still being generated using legacy ciphers, so PHP applications
relying on this feature are not working out of the box. Distros are dropping OpenSSL 1.x.x since
upstream support ended, current apps are struggling with this.
An example of legacy support added to a libssl-dependent app for guidance:
https://github.com/mtrojnar/osslsigncode/pull/194
If legacy provider is not planned to be enabled by default, please consider allowing to enable this
programmatically at least. Thank you.