PHP 5.6 and default cipher list in OpenSSL
| From: | Remi Collet | Date: | Mon, 22 Sep 2014 15:58:40 +0000 |
| Subject: | PHP 5.6 and default cipher list in OpenSSL | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-77471@lists.php.net to get a copy of this message | ||
Hi,
Sorry to have not detect this problem at RFC time, but the new hardcoded
cipher list, cause some trouble in Fedora.
See: https://bugs.php.net/68074
http://fedoraproject.org/wiki/Changes/CryptoPolicy
https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies
https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers
And the simple patch
https://bugs.php.net/patch-display.php?bug_id=68074&patch=system-ciphers.patch&revision=latest
If no objection, plan to apply this quite soon in 5.6+
Cheers,
Remi.