Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:97941
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain lerdorf.com designates 74.125.82.179 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <422ee0db-34f3-e8cd-29b3-e4968af57417@librelamp.com>
References: <CACXBjuhUphs7uZwFCn+18_DLC=Dcyg_TTyJRS7dLFfjNmP5f2Q@mail.gmail.com>
 <CAEKnhAHtXJp7UY49moWbJN+0VOeYaxCs_erf4=X4Od4yz4Mh3Q@mail.gmail.com>
 <CACXBjujSC4kwv1otKPkm7eA0yTh+HkQRr3GFPFmXCHdhnyhYsg@mail.gmail.com>
 <acd6985d-9bcf-2468-92a8-090f844bcb70@librelamp.com> <CACXBjuj=jEmbmuqvx+jcxU=DFxRWuLRgoqWy=RkmWSUy0tfs2w@mail.gmail.com>
 <422ee0db-34f3-e8cd-29b3-e4968af57417@librelamp.com>
Date: Mon, 23 Jan 2017 14:36:58 -0800
Message-ID: <CACXBjuj1O3bn2UmjHjc8+WrQ24DbDUoRke=RBBSrUEpnwCtJEw@mail.gmail.com>
To: Alice Wonder <alice@librelamp.com>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=94eb2c0956809c78b80546caa537
Subject: Re: [PHP-DEV] Re: PHP 7.0 and openssl 1.1
From: rasmus@lerdorf.com (Rasmus Lerdorf)

--94eb2c0956809c78b80546caa537
Content-Type: text/plain; charset=UTF-8

On Mon, Jan 23, 2017 at 12:52 PM, Alice Wonder <alice@librelamp.com> wrote:

> Actually I found that wasn't the case. To build php against an alternat
> openssl API - I did have to rebuild net-snmp but curl, for example, at
> least on CentOS uses NSS for it's TLS and so didn't need to be rebuild to
> build PHP against a different OpenSSL API.
>
> Building in mock, the only php dependency that had an OpenSSL API
> dependency was net-snmp. And if I kept the same API for net-snmp, I didn't
> have to replace the system net-snmp for php to work properly - only the
> net-snmp used in mock.
>
>
Well, you got lucky with your libcurl then. On Debian the default is
openssl. You can optionally choose either gnutls or nss instead if you
like. I am pretty sure Centos also has a libcurl-openssl variant that
people might be using:

libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour)
libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS
flavour)
libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour)

libcurl having those alternatives is probably the easiest dependency. libpq
(PostgreSQL) and libc-client do not, as far as I know.

-Rasmus

--94eb2c0956809c78b80546caa537--