php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #68074 Allow to use system cipher list instead of hardcoded value
Submitted: 2014-09-22 15:53 UTC Modified: 2014-09-24 08:40 UTC
From: remi@php.net Assigned: remi (profile)
Status: Closed Package: OpenSSL related
PHP Version: Irrelevant OS: Fedora 21+
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: remi@php.net
New email:
PHP Version: OS:

 

 [2014-09-22 15:53 UTC] remi@php.net 
Description:
------------
In PHP 5.6, openssl change introduce a harcoded cipher list
https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers

This is fine when system is badly configured.
But this kill security system management.

Especially, Fedora 21 plan to change Crypto policy

See:
Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy
Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies

Proposal: allow, at build time to use system cipher list instead of hardcoded value.

Patches

system-ciphers.patch (last revision 2014-09-22 15:53 UTC by remi@php.net)

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-09-22 15:53 UTC] remi@php.net
-Assigned To: +Assigned To: remi
 [2014-09-22 15:53 UTC] remi@php.net 
The following patch has been added/updated:

Patch Name: system-ciphers.patch
Revision:   1411401232
URL:        https://bugs.php.net/patch-display.php?bug=68074&patch=system-ciphers.patch&revision=1411401232
 [2014-09-24 08:37 UTC] remi@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 [2014-09-24 08:37 UTC] remi@php.net
-Status: Assigned +Status: Closed
 [2014-09-24 08:40 UTC] remi@php.net
-Summary: Use system cipher list instead of hardcoded value +Summary: Allow to use system cipher list instead of hardcoded value
 [2014-09-24 19:40 UTC] ab@php.net 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Nov 21 11:01:29 2024 UTC