Commit:    fc7ab27cda68f6e1d803dc25ac6b30d8b472969e
Author:    Peter Cowburn <[email protected]>         Sun, 7 Jun 2020 11:32:50 
+0100
Parents:   f0ad7ed7515d5822f840661d97907717a4c9a92f
Branches:  master

Link:       
http://git.php.net/?p=web/master.git;a=commitdiff;h=fc7ab27cda68f6e1d803dc25ac6b30d8b472969e

Log:
skip Diffie-Hellman ciphers for fetching user notes from master (bug #79663)

Without this, fetching user notes fails on the rsync box with the
OpenSSL error (which is suppressed via the @ operator):

    error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small

TODO: likely other scripts need similar treatment until Apache is
upgraded on master.

Bugs:
https://bugs.php.net/79663

Changed paths:
  M  scripts/update-user-notes


Diff:
diff --git a/scripts/update-user-notes b/scripts/update-user-notes
index 5d46694..451df59 100755
--- a/scripts/update-user-notes
+++ b/scripts/update-user-notes
@@ -27,9 +27,16 @@ if(in_array('https', stream_get_wrappers())) {
 
 /* get user notes */
 if($SSL_fopen) {
+    $ctx = stream_context_create([
+        'ssl' => [
+            'ciphers' => 'DEFAULT:!DH',
+        ],
+    ]);
     $fp = @fopen(
         
"https://master.php.net/fetch/user-notes.php?token=$token";.($since?"&since=$since":""),
-        "r"
+        "r",
+        false,
+        $ctx
     );
 } else {
     $url = 
escapeshellarg("https://master.php.net/fetch/user-notes.php?token=$token";.($since?"&since=$since":""));


--
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to