mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
ext/openssl: Bump minimum required OpenSSL version to 1.1.1
Bumps the minimum required OpenSSL version from 1.0.2 to 1.1.1. OpenSSL 1.1.1 is an LTS release, but has reached[^1] EOL from upstream. However, Linux distro/OS vendors continue to ship OpenSSL 1.1.1, so 1.1.1 was picked as the minimum. The current minimum 1.0.2 reached EOL in 2018. Bumping the minimum required OpenSSL version makes it possible for ext-openssl to remove a bunch of conditional code, and assume that TLS 1.3 (shipped with OpenSSL 1.1.1) will be supported everywhere. - Debian buster: 1.1.1[^2] - Ubuntu 20.04: 1.1.1[^3] - CentOS/RHEL 7: 1.0.2 - RHEL 8/Rocky 8/EL 8: 1.1.1 - Fedora 38: 3.0.9 (`openssl11` provides OpenSSL 1.1 as well) RHEL/CentOS 7 reaches EOL mid 2024, so for PHP 8.4 scheduled towards the end of this year, we can safely bump the minimum OpenSSL version. [^1]: https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/index.html [^2]: https://packages.debian.org/buster/libssl-dev [^3]: https://packages.ubuntu.com/focal/libssl-dev
This commit is contained in:
committed by
Jakub Zelenka
parent
0c07b0d94f
commit
3de3e137bf
@@ -928,12 +928,6 @@ default_socket_timeout = 60
|
||||
; Be sure to appropriately set the extension_dir directive.
|
||||
;
|
||||
;extension=bz2
|
||||
|
||||
; The ldap extension must be before curl if OpenSSL 1.0.2 and OpenLDAP is used
|
||||
; otherwise it results in segfault when unloading after using SASL.
|
||||
; See https://github.com/php/php-src/issues/8620 for more info.
|
||||
;extension=ldap
|
||||
|
||||
;extension=curl
|
||||
;extension=ffi
|
||||
;extension=ftp
|
||||
@@ -942,6 +936,7 @@ default_socket_timeout = 60
|
||||
;extension=gettext
|
||||
;extension=gmp
|
||||
;extension=intl
|
||||
;extension=ldap
|
||||
;extension=mbstring
|
||||
;extension=exif ; Must be after mbstring as it depends on it
|
||||
;extension=mysqli
|
||||
|
||||
Reference in New Issue
Block a user