Skip to content

Commit badd307

Browse files
authored
Document OpenSSL legacy.dll provider on Windows (GH-1966)
Cf. <php/php-src#9890>.
1 parent ebfd524 commit badd307

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

reference/openssl/configure.xml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,15 @@
7373
Ensure that non-privileged users are not allowed to modify <filename>openssl.cnf</filename>.
7474
</simpara>
7575
</caution>
76+
<simpara>
77+
As of OpenSSL 3.0.0, which is used on Windows by default as of PHP 8.2.0, several
78+
algorithms have been deemed legacy. Such algorithms have commonly fallen out of use,
79+
have been deemed insecure by the cryptography community, or something similar.
80+
These algorithms are still available via the legacy provider
81+
(<filename>extras/ssl/legacy.dll</filename>); its usage is described in the
82+
<link xlink:href="&url.openssl.config;#Provider-Configuration">provider configuration</link>
83+
section of the OpenSSL manual.
84+
</simpara>
7685
</note>
7786

7887
<simplesect role="changelog">

0 commit comments

Comments
 (0)