Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:79556
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.169 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <648FEBB3-9D71-4AE3-BFDA-5ED268FC02A7@ajf.me>
References: <CAPKwhwsOZiGPkvEtXYCBX3dJP3SJ=PTrwqRtQWVzX3SegK6jsg@mail.gmail.com>
	<5487E91D.6070602@fedoraproject.org>
	<648FEBB3-9D71-4AE3-BFDA-5ED268FC02A7@ajf.me>
Date: Thu, 11 Dec 2014 17:54:52 +1100
Message-ID: <CAEZPtU7mUUXrFwBkwHFVx8HQOK6Tx0xfVHAiHxqBgCkK+eAoMA@mail.gmail.com>
To: Andrea Faulds <ajf@ajf.me>
Cc: Remi Collet <remi@fedoraproject.org>, PHP internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] libmcrypt: abandonware?
From: pierre.php@gmail.com (Pierre Joye)

On Thu, Dec 11, 2014 at 5:31 AM, Andrea Faulds <ajf@ajf.me> wrote:
> Hi!
>
>> On 10 Dec 2014, at 06:33, Remi Collet <remi@fedoraproject.org> wrote:
>>
>> Having a dead upstream for crypto API is a critical issue :(
>>
>> FYI some downstream (ex RHEL) don't even provide this library.
>> Already too much crypto libraries, and it will be a mess to provide a
>> dead project in an Enterprise distribution.
>>
>> So php/mcrypt also not available.
>>
>> But most applications. which use it, usually have alternative, and
>> make it optional (ex phpMyAdmin 4.3 now even use openssl as first choice=
).
>>
>> We probably have enough crypto API in PHP, and we probably should mark
>> this one as deprecated / unmaintained in 5.x, and move it to PECL (7.x).
>
> It=E2=80=99s my understanding that ext/mcrypt is quite widely used. Would=
 it not be possible to update the lib to use OpenSSL or something on the ba=
ckend, so existing applications would not need changing?

I suppose you  mean to replace the functions implementation to use
openssl + some custom codes? As maintaining our own library is not
going to be a good idea :)


--=20
Pierre

@pierrejoye | http://www.libgd.org