Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94535
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.161.182 as permitted sender)
MIME-Version: 1.0
Sender: jakub.php@gmail.com
In-Reply-To: <CANUQDCg9qi+k-RRZMcOept6C9_xiKJvys95jnPs2+cDMkqvjPw@mail.gmail.com>
References: <CAEKnhAH53BWSJY0hZADh3CQAUEojBP2pdZ7gvKp-EecnhwQiuA@mail.gmail.com>
 <CAEKnhAHKBMLrpJ0hGsHhH-yR6c-tDUpkhmkO_HnZdWWV90pEcA@mail.gmail.com>
 <10aa7da4-9880-811a-92f8-71ae5dcce621@gmail.com> <CAEZPtU7pvFQtTLBOsObN3r9Or-5N+q+b1kCRXGD7gZRxsVDGEw@mail.gmail.com>
 <CAEKnhAFisPHSP2XRyPaJeO_hUUTLN5wL7efgcUEa76qgT9tq1w@mail.gmail.com> <CANUQDCg9qi+k-RRZMcOept6C9_xiKJvys95jnPs2+cDMkqvjPw@mail.gmail.com>
Date: Sun, 17 Jul 2016 21:04:04 +0100
Message-ID: <CAEKnhAGXdcJTdJveg5evhHcGEs4DiRdQoJ+n9VO0svXDF_WjpQ@mail.gmail.com>
To: Niklas Keller <me@kelunik.com>
Cc: Pierre Joye <pierre.php@gmail.com>, Stanislav Malyshev <smalyshev@gmail.com>, 
	PHP internals list <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=94eb2c056ba68630350537da5a77
Subject: Re: [PHP-DEV] Re: Bumping minimal OpenSSL version to 1.0.1 in master
 for PHP 7.1
From: bukka@php.net (Jakub Zelenka)

--94eb2c056ba68630350537da5a77
Content-Type: text/plain; charset=UTF-8

On Fri, Jul 15, 2016 at 10:18 PM, Niklas Keller <me@kelunik.com> wrote:

> 2016-07-15 18:30 GMT+02:00 Jakub Zelenka <bukka@php.net>:
>
>> Hi,
>>
>> On Fri, Jul 15, 2016 at 9:48 AM, Pierre Joye <pierre.php@gmail.com>
>> wrote:
>>
>> > hi,
>> >
>> > On Fri, Jul 15, 2016 at 5:07 AM, Stanislav Malyshev <
>> smalyshev@gmail.com>
>> > wrote:
>> > > Hi!
>> > >
>> > >> For that reason I'm thinking about postponing this. I would also
>> love to
>> > >> hear your thoughts and possibly if someone is able to dig up the OS X
>> > >> OpenSSL support info, that would be great too!
>> > >
>> > > As somebody working almost exclusively on OS X for my php builds for
>> the
>> > > last couple of years - I don't care too much what Apple ships or does
>> > > not ship by default. It's usually out-of-date and hard to use anyway.
>> > > And many libraries aren't there so you have to use external packages
>> in
>> > > any case, and if you already do, homebrew is one of the best.
>> > >
>> > > It's much easier to spend a little time once and install all necessary
>> > > libs from homebrew and build against that. So for master, I wouldn't
>> > > have too many worries in this regard.
>> > >
>> > > BTW, homebrew is now on 1.0.2g. Which is not latest-greatest, but not
>> > > bad. And it is also not hard to use more recent sources IIRC.
>> >
>> > I  agree with Stas about OSX. It will take (a lot of) time until Apple
>> > ships 7.1 with OSX. Most developers use either a VM, homebrew or an
>> > alternative due to many outdated components. They do provide latest
>> > versions as far as I remember.
>> >
>> > All in all I think we should drop these features and also require 1.x.
>> >
>> >
>> I have been thinking about it more and I think you are right. We should
>> drop the support for 0.9.8 and 1.0.0 that are EOL. Just the fact that
>> Apple
>> deprecated it and suggested not using the system lib says a lot. When we
>> add that OS X 10.11 (El Capitan) doesn't even ship header and lib files
>> and
>> the back-patching is not probably great, then there is probably no reason
>> to keep it for the cost of the maintenance of these old versions which
>> slows the development of openssl ext up. Especially after I add support
>> for
>> OpenSSL 1.1.
>>
>> Unless someone has got a strong feeling and good reason why we shouldn't
>> drop it, I will bump the minimal version in the next couple of days.
>>
>> Thanks for the feedback!
>>
>> P.S. forgot to send link for the Apple info about OpenSSL before so here
>> it
>> is :) :
>>
>>
>> https://developer.apple.com/library/mac/documentation/Security/Conceptual/cryptoservices/GeneralPurposeCrypto/GeneralPurposeCrypto.html
>>
>> Cheers
>>
>> Jakub
>>
>
> I'm not sure, but I guess it would be good if this happened before feature
> freeze / beta1 which will be tagged on 18th / 19th July.
>
> Regards, Niklas
>

Yes, it's been merged!

Cheers

Jakub

--94eb2c056ba68630350537da5a77--