Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:97389 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 11104 invoked from network); 13 Dec 2016 17:28:51 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 13 Dec 2016 17:28:51 -0000 Authentication-Results: pb1.pair.com header.from=alice@librelamp.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=alice@librelamp.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain librelamp.com designates 45.79.96.192 as permitted sender) X-PHP-List-Original-Sender: alice@librelamp.com X-Host-Fingerprint: 45.79.96.192 librelamp.com Received: from [45.79.96.192] ([45.79.96.192:59502] helo=librelamp.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id D0/23-21185-2DF20585 for ; Tue, 13 Dec 2016 12:28:50 -0500 Received: from localhost.localdomain (c-50-184-37-123.hsd1.ca.comcast.net [50.184.37.123]) by librelamp.com (Postfix) with ESMTPSA id EF48371A for ; Tue, 13 Dec 2016 17:28:46 +0000 (UTC) To: internals@lists.php.net References: <10aa7da4-9880-811a-92f8-71ae5dcce621@gmail.com> Message-ID: Date: Tue, 13 Dec 2016 09:28:46 -0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Re: Bumping minimal OpenSSL version to 1.0.1 in master for PHP 7.1 From: alice@librelamp.com (Alice Wonder) On 12/13/2016 02:31 AM, Niklas Keller wrote: > OpenSSL support for 1.0.1 will end this year. > > Support for version 1.0.1 will cease on 2016-12-31. No further releases of >> 1.0.1 will be made after that date. Security fixes only will be applied to >> 1.0.1 until then. >> Version 1.0.0 is no longer supported. >> Version 0.9.8 is no longer supported. > > > We dropped 0.9.8 and 1.0.0 in 7.1. > > Should we drop support for 1.0.1 in master, so it's dropped for 7.2 then, > as it will be unsupported then? > > Regards, Niklas > Will support also then be dropped for LibreSSL? It was forked from 1.0.1g Right now it is a minority player but I really prefer it over OpenSSL. I can discuss why but there are lots of discussions on that if the points aren't already heard.