Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:88213 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 35529 invoked from network); 15 Sep 2015 13:14:37 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 15 Sep 2015 13:14:37 -0000 Authentication-Results: pb1.pair.com smtp.mail=remi@fedoraproject.org; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=remi@fedoraproject.org; sender-id=unknown Received-SPF: error (pb1.pair.com: domain fedoraproject.org from 217.70.183.196 cause and error) X-PHP-List-Original-Sender: remi@fedoraproject.org X-Host-Fingerprint: 217.70.183.196 relay4-d.mail.gandi.net Received: from [217.70.183.196] ([217.70.183.196:43131] helo=relay4-d.mail.gandi.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 54/85-28087-BB918F55 for ; Tue, 15 Sep 2015 09:14:35 -0400 Received: from mfilter25-d.gandi.net (mfilter25-d.gandi.net [217.70.178.153]) by relay4-d.mail.gandi.net (Postfix) with ESMTP id 7B5091725B8 for ; Tue, 15 Sep 2015 15:14:32 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter25-d.gandi.net Received: from relay4-d.mail.gandi.net ([IPv6:::ffff:217.70.183.196]) by mfilter25-d.gandi.net (mfilter25-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id W5ok-tx3MLQc for ; Tue, 15 Sep 2015 15:14:31 +0200 (CEST) X-Originating-IP: 82.241.130.121 Received: from schrodingerscat.famillecollet.com (pom51-2-82-241-130-121.fbx.proxad.net [82.241.130.121]) (Authenticated sender: contact@ll-experts.com) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 0B4F31720E5 for ; Tue, 15 Sep 2015 15:14:30 +0200 (CEST) To: internals@lists.php.net References: Message-ID: <55F819B6.7070702@fedoraproject.org> Date: Tue, 15 Sep 2015 15:14:30 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] Bumping minimal OpenSSL version to 0.9.8 From: remi@fedoraproject.org (Remi Collet) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Le 14/09/2015 14:03, Jakub Zelenka a =C3=A9crit : > Hi, >=20 > At the moment the minimal OpenSSL version is 0.9.6. >=20 > I realised yesterday that there are some types changes between > 0.9.7 and 0.9.8 that would have to be address in overflow checks > (EVP_DigestUpdate and related). I also noticed that 0.9.6 might not > even compile without warnings as it's checking return type for some > function that did not return anything in 0.9.6. We also have few > other old places where we don't check retval because of that. >=20 > The thing is that the last update for 0.9.7 stable branch is in > 2008 and 0.9.6 in 2005. Both of them have been long time EOL so I > don't think that it makes any sense to spend any time on making > them compatible for PHP 7. So I think we should bump minimal > version to 0.9.8. >=20 > Anatol would you be ok if this is done for 7.0? I don't think that > anyone would ever use PHP 7 and such an old version of OpenSSL > together so there should be no issue IMHO. +1 RHEL-7 have 1.0.1e RHEL-6 have 1.0.1e RHEL-5 have 0.9.8e (and already doesn't support PHP 7) Remi > Cheers >=20 > Jakub >=20 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlX4GbYACgkQYUppBSnxahhofgCeLMoQfhBIZM6cwxRU+r0BSVhB nWcAn2x0NKfN3ceJH/MNmcNl9CcTmPM1 =3D+SqR -----END PGP SIGNATURE-----