Re: Dropping SSL2 in 7.1
| From: | Jakub Zelenka | Date: | Sun, 17 Jul 2016 20:05:13 +0000 |
| Subject: | Re: Dropping SSL2 in 7.1 | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-94536@lists.php.net to get a copy of this message | ||
On Wed, Jul 13, 2016 at 8:11 PM, Jakub Zelenka <bukka@php.net> wrote:
> Hi,
>
> It's been already proposed by Remi using PR [1] so sending it here as
> well. I would like to proceed and drop SSL2 support from PHP. Effectively
> it means dropping ssl2 stream as it's not already negotiated by default.
>
> It's been dropped in OpenSSL 1.1 and we don't already support it with
> 1.0.2. Considering that I will be merging dropping support for 0.9.8 and
> 1.0.0 shortly, it leaves just 1.0.1 that would support it. Considering also
> the possible security issues, I think there is no reason to keep it.
>
> Please let me know if any objections.
>
> [1] https://github.com/php/php-src/pull/1826
>
> Cheers
>
>
The PR has been merged and SSL2 dropped for PHP 7.1