Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:77471 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 68671 invoked from network); 22 Sep 2014 15:58:48 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 22 Sep 2014 15:58:48 -0000 Authentication-Results: pb1.pair.com header.from=Remi@FamilleCollet.com; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=Remi@FamilleCollet.com; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain FamilleCollet.com from 217.70.183.195 cause and error) X-PHP-List-Original-Sender: Remi@FamilleCollet.com X-Host-Fingerprint: 217.70.183.195 relay3-d.mail.gandi.net Received: from [217.70.183.195] ([217.70.183.195:43010] helo=relay3-d.mail.gandi.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 1D/D0-64052-63740245 for ; Mon, 22 Sep 2014 11:58:46 -0400 Received: from mfilter23-d.gandi.net (mfilter23-d.gandi.net [217.70.178.151]) by relay3-d.mail.gandi.net (Postfix) with ESMTP id 7D8ABA80BB for ; Mon, 22 Sep 2014 17:58:42 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter23-d.gandi.net Received: from relay3-d.mail.gandi.net ([217.70.183.195]) by mfilter23-d.gandi.net (mfilter23-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id 5XCYeVYezrty for ; Mon, 22 Sep 2014 17:58:41 +0200 (CEST) X-Originating-IP: 82.241.130.121 Received: from schrodingerscat.famillecollet.com (pom51-2-82-241-130-121.fbx.proxad.net [82.241.130.121]) (Authenticated sender: contact@ll-experts.com) by relay3-d.mail.gandi.net (Postfix) with ESMTPSA id 09D12A80ED for ; Mon, 22 Sep 2014 17:58:40 +0200 (CEST) Message-ID: <54204730.3030304@FamilleCollet.com> Date: Mon, 22 Sep 2014 17:58:40 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.1 MIME-Version: 1.0 To: PHP Internals Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: PHP 5.6 and default cipher list in OpenSSL From: Remi@FamilleCollet.com (Remi Collet) Hi, Sorry to have not detect this problem at RFC time, but the new hardcoded cipher list, cause some trouble in Fedora. See: https://bugs.php.net/68074 http://fedoraproject.org/wiki/Changes/CryptoPolicy https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers And the simple patch https://bugs.php.net/patch-display.php?bug_id=68074&patch=system-ciphers.patch&revision=latest If no objection, plan to apply this quite soon in 5.6+ Cheers, Remi.