Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:94502 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 55053 invoked from network); 13 Jul 2016 19:11:06 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 13 Jul 2016 19:11:06 -0000 Authentication-Results: pb1.pair.com header.from=jakub.php@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=jakub.php@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.161.175 as permitted sender) X-PHP-List-Original-Sender: jakub.php@gmail.com X-Host-Fingerprint: 209.85.161.175 mail-yw0-f175.google.com Received: from [209.85.161.175] ([209.85.161.175:36689] helo=mail-yw0-f175.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 9A/B4-10509-84296875 for ; Wed, 13 Jul 2016 15:11:05 -0400 Received: by mail-yw0-f175.google.com with SMTP id w127so52836135ywf.3 for ; Wed, 13 Jul 2016 12:11:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:from:date:message-id:subject:to; bh=Oh/fmOuhswLhB/VJ15xGRpu7xKSn1SyyA2GFMP3/XxI=; b=MgWkULDlHFfXAOjdfxcTIH2HFH9+hOwfadAZM8rJHM/34u1i7WPkfqxrkExNw8ZoOc ZaQ5HK73TnMsHNB+RlX0TrY4N+zl9K8AxQwLatX33YRFuBbOmfuAFgCk5CoAlG00AJpu Z3HZmZln7gRdzHNsJpNUM1VCHGs0h2uo58CkaKU8M2oTmt00rCOH0UKhaZkcMSrINos2 fILGyntMV7Zo6rTRfVgkwyQG31ci3f0aR7RoEMC1vmADXIeba052YdM6WgivSWDEXQ1v QoTc5fQX3MQisO0rzRhqU0vasnLbXD+kb2p6YS/hWgLTjuAwR+iDdEvXILSx48sgW14r czfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=Oh/fmOuhswLhB/VJ15xGRpu7xKSn1SyyA2GFMP3/XxI=; b=AgxjRIo5xJbAzGYs1/CL6wDsxzw8KR2+9OMQnX2NAuQHSHEEADCkw5Si6zwnOm757u GXZMMtkl3FG7uJLePr4ELE0jyM+oOxNigPtE4wsN959xLdv0v3aVO0K4A0uRgtlFIJs/ tyTfzfak8jnzyJV4Nt8JXWCUNLMR8InBcXA+xd/dZLixzaX8RjNuW9MwVRJOJ+1NZR4N hbSm5N2Oa/c638S1gy34Rkmt9vg3cFSvQbZmZHZaODmWcp1+dABQbro5ijiRvwb9fGpS VPY3ZJXRHZWls+FdHot39kHXaMM7xSglvh1f3IoOupzDq7GpGMJufq3hXfDMlh6ABrq6 djXg== X-Gm-Message-State: ALyK8tJYcQOsLGYklzrSv0bls40lxLEhAyfGOQLL+joY9fQ4n7ISt/6Fu4UJBlELGE+mQDEpZBp8UCULgqzxCQ== X-Received: by 10.37.220.79 with SMTP id y76mr6964195ybe.100.1468437061308; Wed, 13 Jul 2016 12:11:01 -0700 (PDT) MIME-Version: 1.0 Sender: jakub.php@gmail.com Received: by 10.129.52.143 with HTTP; Wed, 13 Jul 2016 12:11:00 -0700 (PDT) Date: Wed, 13 Jul 2016 20:11:00 +0100 X-Google-Sender-Auth: no5uXTXBDYr9sBqphGai3-WYgVU Message-ID: To: PHP internals list Content-Type: multipart/alternative; boundary=94eb2c19024a6a16c80537892500 Subject: Dropping SSL2 in 7.1 From: bukka@php.net (Jakub Zelenka) --94eb2c19024a6a16c80537892500 Content-Type: text/plain; charset=UTF-8 Hi, It's been already proposed by Remi using PR [1] so sending it here as well. I would like to proceed and drop SSL2 support from PHP. Effectively it means dropping ssl2 stream as it's not already negotiated by default. It's been dropped in OpenSSL 1.1 and we don't already support it with 1.0.2. Considering that I will be merging dropping support for 0.9.8 and 1.0.0 shortly, it leaves just 1.0.1 that would support it. Considering also the possible security issues, I think there is no reason to keep it. Please let me know if any objections. [1] https://github.com/php/php-src/pull/1826 Cheers Jakub --94eb2c19024a6a16c80537892500--