Re: [INTERNALS-WIN] Re: PHP OpenSSL v0.9.8 compatibility issue with OpenSSL v1.0

hi,

On Wed, Dec 12, 2012 at 3:12 PM, Jan Ehrhardt <[email protected]> wrote:
> Richard Genthner in php.internals.win (Wed, 12 Dec 2012 08:50:40 -0500):
>>       Thanks a bunch!
>
> My pleasure. Keep us posted on the results of your tests.
>
> BTW: on Apachelounge there was a warning from the PHP team (Pierre?),
> dated the day before yesterday:

Yes, mixing openssl versions in the same process leads to random
crashes. We got too many bogus reports about that and I asked Steffen
to add a note to avoid too many troubles on the users side.

> "People using php's binaries from http://windows.php.net/download/ with
> openssl must use openssl 0.9.8 builds. Mixing ssl versions in the same
> process causes crashes."
>
> http://www.apachelounge.com/viewtopic.php?t=4200
>
> If you want a complete PHP 5.3.19 build with everything openssl 1.0.1c,
> I can give you that as well. I do not really know why Pierre says they
> can't move to 1.0.x for PHP 5.3 and 5.4. I can understand the "won't"
> part of his statement, because you don't want to support too many
> versions. But in my eyes there is no technical objection. On my
> development machines (Win7 and Win2k8 R2) everything is OpenSSL 1.0.1c.

The can't and won't is all about technical reasons. Mixing openssl
versions leads to crashes. That's not fixable.

Basically we may or certainly will move to 1.x for 5.5. But we can't
change it at this stage for 5.3 or 5.4.

Cheers,
--
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org