Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94517
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.218 cause and error)
MIME-Version: 1.0
In-Reply-To: <CAEKnhAFisPHSP2XRyPaJeO_hUUTLN5wL7efgcUEa76qgT9tq1w@mail.gmail.com>
References: <CAEKnhAH53BWSJY0hZADh3CQAUEojBP2pdZ7gvKp-EecnhwQiuA@mail.gmail.com>
 <CAEKnhAHKBMLrpJ0hGsHhH-yR6c-tDUpkhmkO_HnZdWWV90pEcA@mail.gmail.com>
 <10aa7da4-9880-811a-92f8-71ae5dcce621@gmail.com> <CAEZPtU7pvFQtTLBOsObN3r9Or-5N+q+b1kCRXGD7gZRxsVDGEw@mail.gmail.com>
 <CAEKnhAFisPHSP2XRyPaJeO_hUUTLN5wL7efgcUEa76qgT9tq1w@mail.gmail.com>
Date: Fri, 15 Jul 2016 23:18:51 +0200
Message-ID: <CANUQDCg9qi+k-RRZMcOept6C9_xiKJvys95jnPs2+cDMkqvjPw@mail.gmail.com>
To: Jakub Zelenka <bukka@php.net>
Cc: Pierre Joye <pierre.php@gmail.com>, Stanislav Malyshev <smalyshev@gmail.com>, 
	PHP internals list <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a1148e21050b24c0537b32a76
Subject: Re: [PHP-DEV] Re: Bumping minimal OpenSSL version to 1.0.1 in master
 for PHP 7.1
From: me@kelunik.com (Niklas Keller)

--001a1148e21050b24c0537b32a76
Content-Type: text/plain; charset=UTF-8

2016-07-15 18:30 GMT+02:00 Jakub Zelenka <bukka@php.net>:

> Hi,
>
> On Fri, Jul 15, 2016 at 9:48 AM, Pierre Joye <pierre.php@gmail.com> wrote:
>
> > hi,
> >
> > On Fri, Jul 15, 2016 at 5:07 AM, Stanislav Malyshev <smalyshev@gmail.com
> >
> > wrote:
> > > Hi!
> > >
> > >> For that reason I'm thinking about postponing this. I would also love
> to
> > >> hear your thoughts and possibly if someone is able to dig up the OS X
> > >> OpenSSL support info, that would be great too!
> > >
> > > As somebody working almost exclusively on OS X for my php builds for
> the
> > > last couple of years - I don't care too much what Apple ships or does
> > > not ship by default. It's usually out-of-date and hard to use anyway.
> > > And many libraries aren't there so you have to use external packages in
> > > any case, and if you already do, homebrew is one of the best.
> > >
> > > It's much easier to spend a little time once and install all necessary
> > > libs from homebrew and build against that. So for master, I wouldn't
> > > have too many worries in this regard.
> > >
> > > BTW, homebrew is now on 1.0.2g. Which is not latest-greatest, but not
> > > bad. And it is also not hard to use more recent sources IIRC.
> >
> > I  agree with Stas about OSX. It will take (a lot of) time until Apple
> > ships 7.1 with OSX. Most developers use either a VM, homebrew or an
> > alternative due to many outdated components. They do provide latest
> > versions as far as I remember.
> >
> > All in all I think we should drop these features and also require 1.x.
> >
> >
> I have been thinking about it more and I think you are right. We should
> drop the support for 0.9.8 and 1.0.0 that are EOL. Just the fact that Apple
> deprecated it and suggested not using the system lib says a lot. When we
> add that OS X 10.11 (El Capitan) doesn't even ship header and lib files and
> the back-patching is not probably great, then there is probably no reason
> to keep it for the cost of the maintenance of these old versions which
> slows the development of openssl ext up. Especially after I add support for
> OpenSSL 1.1.
>
> Unless someone has got a strong feeling and good reason why we shouldn't
> drop it, I will bump the minimal version in the next couple of days.
>
> Thanks for the feedback!
>
> P.S. forgot to send link for the Apple info about OpenSSL before so here it
> is :) :
>
>
> https://developer.apple.com/library/mac/documentation/Security/Conceptual/cryptoservices/GeneralPurposeCrypto/GeneralPurposeCrypto.html
>
> Cheers
>
> Jakub
>

I'm not sure, but I guess it would be good if this happened before feature
freeze / beta1 which will be tagged on 18th / 19th July.

Regards, Niklas

--001a1148e21050b24c0537b32a76--