mirror of
https://github.com/php/php-src.git
synced 2024-09-23 19:07:26 +00:00
10bc5fd4c4
PHP 5.6.0 altered the semantics of the following constants: - STREAM_CRYPTO_METHOD_SSLv23_CLIENT - STREAM_CRYPTO_METHOD_SSLv23_SERVER - STREAM_CRYPTO_METHOD_TLS_CLIENT - STREAM_CRYPTO_METHOD_TLS_SERVER Instead of representing the SSLv23_*() handshake methods the v23 constants were changed to allow only SSLv2 or SSLv3 connections. Likewise, the TLS methods were modified from using only the TLSv1 handshake to allowing TLS1,1.1, and 1.2. This created a situation in which users upgrading from previous versions faced a potential security degradation if they did not update code to use different constants. In the interest of compatibility across PHP versions the original semantics have been restored with the following caveat: **IMPORTANT** The SSLv23 client/server methods will no longer negotiate the use of the insecure SSLv2 or SSLv3 protocols by default. Users wishing to allow these protocols must explicitly add them to the method bitmask via the appropriate flags. |
||
|---|---|---|
| .. | ||
| streams | ||
| alloca.c | ||
| build-defs.h.in | ||
| fopen_wrappers.c | ||
| fopen_wrappers.h | ||
| getopt.c | ||
| internal_functions_nw.c | ||
| internal_functions_win32.c | ||
| internal_functions.c.in | ||
| main.c | ||
| mergesort.c | ||
| network.c | ||
| output.c | ||
| php_compat.h | ||
| php_content_types.c | ||
| php_content_types.h | ||
| php_getopt.h | ||
| php_globals.h | ||
| php_ini.c | ||
| php_ini.h | ||
| php_main.h | ||
| php_memory_streams.h | ||
| php_network.h | ||
| php_open_temporary_file.c | ||
| php_open_temporary_file.h | ||
| php_output.h | ||
| php_reentrancy.h | ||
| php_scandir.c | ||
| php_scandir.h | ||
| php_sprintf.c | ||
| php_stdint.h | ||
| php_streams.h | ||
| php_syslog.h | ||
| php_ticks.c | ||
| php_ticks.h | ||
| php_variables.c | ||
| php_variables.h | ||
| php_version.h | ||
| php.h | ||
| reentrancy.c | ||
| rfc1867.c | ||
| rfc1867.h | ||
| SAPI.c | ||
| SAPI.h | ||
| snprintf.c | ||
| snprintf.h | ||
| spprintf.c | ||
| spprintf.h | ||
| strlcat.c | ||
| strlcpy.c | ||
| win32_internal_function_disabled.h | ||
| win95nt.h | ||