Configurable loading of OpenSSL providers
@bukka is already working on this.
Since Oct 6, 2023.
- Dominant language
- C
- Stars
- 40.4k
- Forks
- 8.1k
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 96
Description
Description
Since OpenSSL 3, some ciphers are not available unless users configure some openssl.cnf file. This is not always possible on certain hosting configurations, so allowing this would unbreak applications depending on this feature.
Today, Windows .p12 files are still being generated using legacy ciphers, so PHP applications relying on this feature are not working out of the box. Distros are dropping OpenSSL 1.x.x since upstream support ended, current apps are struggling with this.
An example of legacy support added to a libssl-dependent app for guidance:
https://github.com/mtrojnar/osslsigncode/pull/194
If legacy provider is not planned to be enabled by default, please consider allowing to enable this programmatically at least. Thank you.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.