php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #68074 Allow to use system cipher list instead of hardcoded value
Submitted: 2014-09-22 15:53 UTC Modified: 2014-09-24 08:40 UTC
From: [email protected] Assigned: remi (profile)
Status: Closed Package: OpenSSL related
PHP Version: Irrelevant OS: Fedora 21+
Private report: No CVE-ID: None
View Developer Edit
 [2014-09-22 15:53 UTC] [email protected] 
Description:
------------
In PHP 5.6, openssl change introduce a harcoded cipher list
https://wiki.php.net/rfc/improved-tls-defaults#default_ciphers

This is fine when system is badly configured.
But this kill security system management.

Especially, Fedora 21 plan to change Crypto policy

See:
Approved change: http://fedoraproject.org/wiki/Changes/CryptoPolicy
Guideline (draft): https://fedoraproject.org/wiki/User:Nmav/CryptoPolicies

Proposal: allow, at build time to use system cipher list instead of hardcoded value.

Patches

system-ciphers.patch (last revision 2014-09-22 15:53 UTC by [email protected])

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2014-09-22 15:53 UTC] [email protected]
-Assigned To: +Assigned To: remi
 [2014-09-22 15:53 UTC] [email protected] 
The following patch has been added/updated:

Patch Name: system-ciphers.patch
Revision:   1411401232
URL:        https://bugs.php.net/patch-display.php?bug=68074&patch=system-ciphers.patch&revision=1411401232
 [2014-09-24 08:37 UTC] [email protected] 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 [2014-09-24 08:37 UTC] [email protected]
-Status: Assigned +Status: Closed
 [2014-09-24 08:40 UTC] [email protected]
-Summary: Use system cipher list instead of hardcoded value +Summary: Allow to use system cipher list instead of hardcoded value
 [2014-09-24 19:40 UTC] [email protected] 
Automatic comment on behalf of remi
Revision: http://git.php.net/?p=php-src.git;a=commit;h=0d776ef87b7b0c1e970c424cc5dcdf4cd6f500ac
Log: Fix bug #68074 Allow to use system cipher list instead of hardcoded value
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed Dec 31 03:00:01 2025 UTC