php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #68074 Allow to use system cipher list instead of hardcoded value
Submitted: 2014-09-22 15:53 UTC Modified: 2014-09-24 08:40 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: OpenSSL related
PHP Version: Irrelevant OS: Fedora 21+
Private report: No CVE-ID: None
View Developer Edit
 [2014-09-22 15:53 UTC] remi@php.net 
Description:
------------
In PHP 5.6, openssl change introduce a harcoded cipher list
https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers

This is fine when system is badly configured.
But this kill security system management.

Especially, Fedora 21 plan to change Crypto policy

See:
Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy
Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies

Proposal: allow, at build time to use system cipher list instead of hardcoded value.

Patches

system-ciphers.patch (last revision 2014-09-22 15:53 UTC by remi@php.net)

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-09-22 15:53 UTC] remi@php.net
-Assigned To: +Assigned To: remi
 [2014-09-22 15:53 UTC] remi@php.net 
The following patch has been added/updated:

Patch Name: system-ciphers.patch
Revision:   1411401232
URL:        https://bugs.php.net/patch-display.php?bug=68074&patch=system-ciphers.patch&revision=1411401232
 [2014-09-24 08:37 UTC] remi@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 [2014-09-24 08:37 UTC] remi@php.net
-Status: Assigned +Status: Closed
 [2014-09-24 08:40 UTC] remi@php.net
-Summary: Use system cipher list instead of hardcoded value +Summary: Allow to use system cipher list instead of hardcoded value
 [2014-09-24 19:40 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 08:01:29 2024 UTC