PHP 8.1 and OpenSSL

[email protected] ("Christoph M. Becker") Wed, 18 Jan 2023 13:20:41 +0100
Newsgroups php.internals,php.internals.win
Message-ID <[email protected]>
Hi all!

While the official builds for PHP 8.2 already use OpenSSL 3.0, the PHP
8.1 builds are still using OpenSSL 1.1.1.  However, OpenSSL 1.1.1 is
only supported till 2023-09-11[1], while PHP 8.1 is supported till
2024-11-25[2].  Although I don't like bumping the OpenSSL version in the
middle of PHP 8.1's lifetime, I suppose it is necessary to avoid falling
behind security support.  And if we do that bump, we better do it sooner
than later.

So, if there are no unforeseen problems, I suggest to build PHP
8.1.16RC1 with OpenSSL 3.0 (PHP 8.1.15RC1 has already been built with
OpenSSL 1.1.1).

Thoughts?  Objections?

[1] <https://www.openssl.org/policies/releasestrat.html>
[2] <https://www.php.net/supported-versions.php>

=2D-
Christoph M. Becker