Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94516
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.161.182 as permitted sender)
MIME-Version: 1.0
Sender: jakub.php@gmail.com
In-Reply-To: <CAEZPtU7pvFQtTLBOsObN3r9Or-5N+q+b1kCRXGD7gZRxsVDGEw@mail.gmail.com>
References: <CAEKnhAH53BWSJY0hZADh3CQAUEojBP2pdZ7gvKp-EecnhwQiuA@mail.gmail.com>
 <CAEKnhAHKBMLrpJ0hGsHhH-yR6c-tDUpkhmkO_HnZdWWV90pEcA@mail.gmail.com>
 <10aa7da4-9880-811a-92f8-71ae5dcce621@gmail.com> <CAEZPtU7pvFQtTLBOsObN3r9Or-5N+q+b1kCRXGD7gZRxsVDGEw@mail.gmail.com>
Date: Fri, 15 Jul 2016 17:30:38 +0100
Message-ID: <CAEKnhAFisPHSP2XRyPaJeO_hUUTLN5wL7efgcUEa76qgT9tq1w@mail.gmail.com>
To: Pierre Joye <pierre.php@gmail.com>
Cc: Stanislav Malyshev <smalyshev@gmail.com>, PHP internals list <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=94eb2c0788129478100537af23f8
Subject: Re: [PHP-DEV] Re: Bumping minimal OpenSSL version to 1.0.1 in master
 for PHP 7.1
From: bukka@php.net (Jakub Zelenka)

--94eb2c0788129478100537af23f8
Content-Type: text/plain; charset=UTF-8

Hi,

On Fri, Jul 15, 2016 at 9:48 AM, Pierre Joye <pierre.php@gmail.com> wrote:

> hi,
>
> On Fri, Jul 15, 2016 at 5:07 AM, Stanislav Malyshev <smalyshev@gmail.com>
> wrote:
> > Hi!
> >
> >> For that reason I'm thinking about postponing this. I would also love to
> >> hear your thoughts and possibly if someone is able to dig up the OS X
> >> OpenSSL support info, that would be great too!
> >
> > As somebody working almost exclusively on OS X for my php builds for the
> > last couple of years - I don't care too much what Apple ships or does
> > not ship by default. It's usually out-of-date and hard to use anyway.
> > And many libraries aren't there so you have to use external packages in
> > any case, and if you already do, homebrew is one of the best.
> >
> > It's much easier to spend a little time once and install all necessary
> > libs from homebrew and build against that. So for master, I wouldn't
> > have too many worries in this regard.
> >
> > BTW, homebrew is now on 1.0.2g. Which is not latest-greatest, but not
> > bad. And it is also not hard to use more recent sources IIRC.
>
> I  agree with Stas about OSX. It will take (a lot of) time until Apple
> ships 7.1 with OSX. Most developers use either a VM, homebrew or an
> alternative due to many outdated components. They do provide latest
> versions as far as I remember.
>
> All in all I think we should drop these features and also require 1.x.
>
>
I have been thinking about it more and I think you are right. We should
drop the support for 0.9.8 and 1.0.0 that are EOL. Just the fact that Apple
deprecated it and suggested not using the system lib says a lot. When we
add that OS X 10.11 (El Capitan) doesn't even ship header and lib files and
the back-patching is not probably great, then there is probably no reason
to keep it for the cost of the maintenance of these old versions which
slows the development of openssl ext up. Especially after I add support for
OpenSSL 1.1.

Unless someone has got a strong feeling and good reason why we shouldn't
drop it, I will bump the minimal version in the next couple of days.

Thanks for the feedback!

P.S. forgot to send link for the Apple info about OpenSSL before so here it
is :) :

https://developer.apple.com/library/mac/documentation/Security/Conceptual/cryptoservices/GeneralPurposeCrypto/GeneralPurposeCrypto.html

Cheers

Jakub

--94eb2c0788129478100537af23f8--