Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:99356 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 72673 invoked from network); 5 Jun 2017 09:11:44 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 5 Jun 2017 09:11:44 -0000 Authentication-Results: pb1.pair.com smtp.mail=me@kelunik.com; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=me@kelunik.com; sender-id=unknown Received-SPF: error (pb1.pair.com: domain kelunik.com from 81.169.146.216 cause and error) X-PHP-List-Original-Sender: me@kelunik.com X-Host-Fingerprint: 81.169.146.216 mo4-p00-ob.smtp.rzone.de Received: from [81.169.146.216] ([81.169.146.216:20858] helo=mo4-p00-ob.smtp.rzone.de) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 9F/47-12681-D4025395 for ; Mon, 05 Jun 2017 05:11:43 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1496653898; l=5354; s=domk; d=kelunik.com; h=Content-Type:Cc:To:Subject:Date:From:References:In-Reply-To: MIME-Version; bh=wqpay55+w7DcyLS6zz7PiV8BnqKMrl3qk6HbR4kRfyw=; b=RJUXpZisOP4jM/L8CAdKMCI8B7knnjJX5kgzvROKZZJs8kpS5JrN07pNKe9SzNmXyP WDEn4nnSQqek/jcS8va9IeXdNziaC49KkxYD+gQ64rVcT7maflIR9R3oFsxCUmhyXqyL 3p9J9RtUoAfTX4RwrX/nsF9XQK/IP0Zzbb3TY= X-RZG-AUTH: :IWkkfkWkbvHsXQGmRYmUo9mls2vWuiu+7SLDup6E67mzuoNHBqXw3Q== X-RZG-CLASS-ID: mo00 Received: by mail-oi0-f48.google.com with SMTP id o65so126133040oif.1 for ; Mon, 05 Jun 2017 02:11:38 -0700 (PDT) X-Gm-Message-State: AODbwcDJjwKBONQcqfputoync/22OLfNlVsQU8KHfhE4sTTcaXhhon0Q rUew6sip9AMIyaoFgYFfWJ0a5eOa+A== X-Received: by 10.157.60.119 with SMTP id j52mr11768701ote.31.1496653897398; Mon, 05 Jun 2017 02:11:37 -0700 (PDT) MIME-Version: 1.0 Received: by 10.74.176.133 with HTTP; Mon, 5 Jun 2017 02:11:36 -0700 (PDT) In-Reply-To: References: Date: Mon, 5 Jun 2017 11:11:36 +0200 X-Gmail-Original-Message-ID: Message-ID: To: Anatol Belski Cc: Nikita Popov , PHP Internals Content-Type: multipart/alternative; boundary="001a11c00fe2e80479055132e3aa" Subject: Re: [PHP-DEV] [RFC][VOTE] Improved SSL / TLS constants From: me@kelunik.com (Niklas Keller) --001a11c00fe2e80479055132e3aa Content-Type: text/plain; charset="UTF-8" 2017-06-04 11:22 GMT+02:00 Niklas Keller : > 2017-05-29 22:29 GMT+02:00 Anatol Belski : > >> Hi Niklas, >> >> > -----Original Message----- >> > From: Niklas Keller [mailto:me@kelunik.com] >> > Sent: Monday, May 29, 2017 10:14 PM >> > To: Anatol Belski >> > Cc: Nikita Popov ; PHP Internals >> > >> > Subject: Re: [PHP-DEV] [RFC][VOTE] Improved SSL / TLS constants >> > >> > Hey Anatol, >> > >> > >> > Niklas, I'd have yet a question about the RFC - it only deals >> with stream >> > wrappers, but there are indeed some other places at least in soap and >> mysqlnd. >> > Don't you think, the RFC and implementation should recapitulate those? >> > >> Yep, here you are >> >> https://github.com/php/php-src/blob/master/ext/soap/php_http.c#L305 >> https://github.com/php/php-src/blob/master/ext/mysqlnd/mysqlnd_net.c#L974 >> >> Basically it is the same story, as the old definitions are used, which >> the RFC aims to replace. It might be consistent to have the behavior >> synced, or at least to evaluate it. And, there might yet some places, not >> expecting much but just to be aware. >> >> Regards > > > Hi Anatol, > > I upgraded STREAM_CRYPTO_METHOD_TLS_CLIENT to be an alias > to STREAM_CRYPTO_METHOD_TLS_ANY_CLIENT now, so that automatically > upgrades any use of STREAM_CRYPTO_METHOD_TLS_CLIENT to use TLS 1.1 or TLS > 1.2 if available. > > Regards, Niklas > Hey everyone, thanks for voting! The voting has now been closed with 14 votes in favor and 0 against. You can see the full results on the voting page as always: https://wiki.php.net/rfc/improved-tls-constants#voting Regards, Niklas --001a11c00fe2e80479055132e3aa--