Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:97392
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.170 as permitted sender)
MIME-Version: 1.0
Sender: jakub.php@gmail.com
In-Reply-To: <CANUQDCifCT3_GmWh=+m+a9D6NFAS=dyvB=DoZJVoGq3Y9tEsrA@mail.gmail.com>
References: <CAEKnhAH53BWSJY0hZADh3CQAUEojBP2pdZ7gvKp-EecnhwQiuA@mail.gmail.com>
 <CAEKnhAHKBMLrpJ0hGsHhH-yR6c-tDUpkhmkO_HnZdWWV90pEcA@mail.gmail.com>
 <10aa7da4-9880-811a-92f8-71ae5dcce621@gmail.com> <CAEZPtU7pvFQtTLBOsObN3r9Or-5N+q+b1kCRXGD7gZRxsVDGEw@mail.gmail.com>
 <CAEKnhAFisPHSP2XRyPaJeO_hUUTLN5wL7efgcUEa76qgT9tq1w@mail.gmail.com>
 <CANUQDCg9qi+k-RRZMcOept6C9_xiKJvys95jnPs2+cDMkqvjPw@mail.gmail.com>
 <CAEKnhAGXdcJTdJveg5evhHcGEs4DiRdQoJ+n9VO0svXDF_WjpQ@mail.gmail.com> <CANUQDCifCT3_GmWh=+m+a9D6NFAS=dyvB=DoZJVoGq3Y9tEsrA@mail.gmail.com>
Date: Tue, 13 Dec 2016 19:41:07 +0000
Message-ID: <CAEKnhAH-5Y=n3khk6DtGt6yxAL-YdW2GZgCAPCfPzW+ujPB_RA@mail.gmail.com>
To: Niklas Keller <me@kelunik.com>
Cc: Pierre Joye <pierre.php@gmail.com>, Stanislav Malyshev <smalyshev@gmail.com>, 
	PHP internals list <internals@lists.php.net>, Remi Collet <remi@fedoraproject.org>
Content-Type: multipart/alternative; boundary=001a114e6784d60df205438f668e
Subject: Re: [PHP-DEV] Re: Bumping minimal OpenSSL version to 1.0.1 in master
 for PHP 7.1
From: bukka@php.net (Jakub Zelenka)

--001a114e6784d60df205438f668e
Content-Type: text/plain; charset=UTF-8

On Tue, Dec 13, 2016 at 10:31 AM, Niklas Keller <me@kelunik.com> wrote:

> OpenSSL support for 1.0.1 will end this year.
>
> Support for version 1.0.1 will cease on 2016-12-31. No further releases of
>> 1.0.1 will be made after that date. Security fixes only will be applied to
>> 1.0.1 until then.
>> Version 1.0.0 is no longer supported.
>> Version 0.9.8 is no longer supported.
>
>
> We dropped 0.9.8 and 1.0.0 in 7.1.
>
> Should we drop support for 1.0.1 in master, so it's dropped for 7.2 then,
> as it will be unsupported then?
>
>
I think some distros like RHEL 6 and 7 still uses 1.0.1e and applies
security and possibly other patches so the support should be much longer.

CC'd Remi as he probably knows more about that and can confirm how it is
with the support of OpenSSL in RHEL..

Cheers

Jakub

--001a114e6784d60df205438f668e--