Hi,

It's been already proposed by Remi using PR [1] so sending it here as well.
I would like to proceed and drop SSL2 support from PHP. Effectively it
means dropping ssl2 stream as it's not already negotiated by default.

It's been dropped in OpenSSL 1.1 and we don't already support it with
1.0.2. Considering that I will be merging dropping support for 0.9.8 and
1.0.0 shortly, it leaves just 1.0.1 that would support it. Considering also
the possible security issues, I think there is no reason to keep it.

Please let me know if any objections.

[1] https://github.com/php/php-src/pull/1826

Cheers

Jakub

Reply via email to