openssl 1.1.0

Open eduardomazolini opened this issue 6 years ago • 3 comments

https://github.com/openssl/openssl/issues/8408 Change code for use ADH on new openssl. But bug if use on old versions.

$context = stream_context_create(array('ssl' => array('ciphers' => 'ADH:ALL:@SECLEVEL=0', 'verify_peer' => false, 'verify_peer_name' => false)));

Mar 06 '19 15:03 eduardomazolini

Since we want to maintain backwards compatibility (as much as possible), I don't think we want to make this change? Anybody else care to comment on this?

Jul 08 '19 15:07 BenMenking

I support moving forward and requiring new versions of SSL. Perhaps we can use a check to support the old version, but throw an E_USER_DEPRECATED warning.

Jul 11 '19 05:07 scottchiefbaker