Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:101231
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: softfail (pb1.pair.com: domain golemon.com does not designate 209.85.216.173 as permitted sender)
MIME-Version: 1.0
Sender: php@golemon.com
In-Reply-To: <35e8f8c5-8fe0-702b-f304-890cf902b390@rhsoft.net>
References: <a64088a5-e93b-3450-fe8c-8ba6ac9d851a@php.net> <CADNQb0VA+-E2B21EZCfzau7v0_0=SeheHB+cxZCsx7RoVNn8jA@mail.gmail.com>
 <41630a4e-8772-bdfb-e859-831a36dc67ea@rhsoft.net> <CANUQDCjsz31t-VqbLeUOc-qJd=wzQ8Tbk2UGhY-74xw+JaGHUA@mail.gmail.com>
 <e8b900c3-3d76-9fe0-7b96-3c1f468d160e@rhsoft.net> <CAESVnVqhNgge2dzHTbf1bCR0unGCYwEeDqS2ErWdyK34M26k6g@mail.gmail.com>
 <9f3d28e1-cc6d-d5dc-da04-7e3791070be8@rhsoft.net> <CAESVnVoWeNdh2R4KROe=CfACQVQJP9sf66iJASPp73nURi9ouw@mail.gmail.com>
 <35e8f8c5-8fe0-702b-f304-890cf902b390@rhsoft.net>
Date: Mon, 4 Dec 2017 14:52:01 -0500
Message-ID: <CAESVnVp+wCRPB+tf7v1V_K-vrtK0Rhjo59sNAV6vUiuyXEW2=A@mail.gmail.com>
To: "lists@rhsoft.net" <lists@rhsoft.net>
Cc: "internals@lists.php.net >> Mailing-List php" <internals@lists.php.net>
Content-Type: text/plain; charset="UTF-8"
Subject: Re: [PHP-DEV] PHP 7.2.0 Released
From: pollita@php.net (Sara Golemon)

On Mon, Dec 4, 2017 at 1:18 PM, lists@rhsoft.net <lists@rhsoft.net> wrote:
> Am 04.12.2017 um 18:36 schrieb Sara Golemon:
>> On Fri, Dec 1, 2017 at 6:35 PM, lists@rhsoft.net <lists@rhsoft.net> wrote:
>>>
>>> the main question is why does PHP need to to *anything* here instead hand
>>> the TLS handshake completly over to openssl? in that case even PHP5 could
>>> perfer TLS1.2 ciphers against a sevrer that orders them on top without
>>> touch
>>> any line of PHP's code
>>>
>> Because the SSL API in OpenSSL that PHP uses doesn't let you say:
>> "Just give me the best method you can"
>>
>> There may be another SSL API that does, but that's more than just "set
>> the value to any and be done with it"
>
>
> and how does other software like the apache benchmark tool "ab" this for as
> long as i can think which is also linked against openssl?
>

You quoted this, but I don't think you understood it.
"""
There may be another SSL API that does, but that's more than just "set
the value to any and be done with it".

Pull requests welcome,
"""

I don't doubt that it's possible to do, but it's not as trivial as
"Just make the ANY constant really mean ANY".
If you have a solution, offer it.
Until then, it's going to wait until someone else has the time and
inclination to do so.

-Sara