Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:77472 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 69449 invoked from network); 22 Sep 2014 15:59:17 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 22 Sep 2014 15:59:17 -0000 Authentication-Results: pb1.pair.com header.from=remi@fedoraproject.org; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=remi@fedoraproject.org; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain fedoraproject.org from 217.70.183.197 cause and error) X-PHP-List-Original-Sender: remi@fedoraproject.org X-Host-Fingerprint: 217.70.183.197 relay5-d.mail.gandi.net Linux 2.6 Received: from [217.70.183.197] ([217.70.183.197:48114] helo=relay5-d.mail.gandi.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 63/01-64052-25740245 for ; Mon, 22 Sep 2014 11:59:15 -0400 Received: from mfilter36-d.gandi.net (mfilter36-d.gandi.net [217.70.178.167]) by relay5-d.mail.gandi.net (Postfix) with ESMTP id 1E37841C097 for ; Mon, 22 Sep 2014 17:59:12 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter36-d.gandi.net Received: from relay5-d.mail.gandi.net ([217.70.183.197]) by mfilter36-d.gandi.net (mfilter36-d.gandi.net [10.0.15.180]) (amavisd-new, port 10024) with ESMTP id 4xV3SIbDCMTE for ; Mon, 22 Sep 2014 17:59:10 +0200 (CEST) X-Originating-IP: 82.241.130.121 Received: from schrodingerscat.famillecollet.com (pom51-2-82-241-130-121.fbx.proxad.net [82.241.130.121]) (Authenticated sender: contact@ll-experts.com) by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id 9570641C072 for ; Mon, 22 Sep 2014 17:59:10 +0200 (CEST) Message-ID: <5420474E.3040807@fedoraproject.org> Date: Mon, 22 Sep 2014 17:59:10 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.1 MIME-Version: 1.0 To: PHP Internals Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: PHP 5.6 and default cipher list in OpenSSL From: remi@fedoraproject.org (Remi Collet) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Sorry to have not detect this problem at RFC time, but the new hardcoded cipher list, cause some trouble in Fedora. See: https://bugs.php.net/68074 http://fedoraproject.org/wiki/Changes/CryptoPolicy https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers And the simple patch https://bugs.php.net/patch-display.php?bug_id=68074&patch=system-ciphers.patch&revision=latest If no objection, plan to apply this quite soon in 5.6+ Cheers, Remi. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlQgR04ACgkQYUppBSnxahhXvQCgwtPYInzckq6ZoWunPK8hL2UY Qd4AoNa7v50CBnLWcBRfhC9Zsl53/DVK =nV+z -----END PGP SIGNATURE-----