Different OpenSSL version

T

terry_b

New member
Is there a way to downgrade OpenSSL that is included with the .exe?

I need to be able to use cURL with SSLv3 for the application I’m working on.

Thank you!

Terry
 
You could try to replace the DLL files in the correct PHPRuntimeXX folder of ExeOutput. Then, clear the cache in the Environment Options to force ExeOutput to recompress PHP runtime files.
 
I see two files that I would need to replace (for php v7.3):
  • libssl-1_1.dll
  • libcrypto-1_1.dll
However, in older OpenSSL, there’s no libcrypto-x-y.dll file.
 
Last edited:
I’ve compared php 7.1 and php 7.3. There are indeed two files that seem to be different between the two versions. However I have no clue how to proceed since I’d like to have php 7.3 run with an older openssl.
 
Maybe way out in left field, but have you tried encouraging CURL to use SSLV3? Something like:
Code: 
curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');
Have not tried this with PHP 7.3. Used it couple of years ago with success though…
 
oldteacher: Yes, that will work but only if SSLv3 is included with OpenSSL. However php v7.2 and php v7.3 use a version of OpenSSl that doesn’t have SSLv2 and SSLv3.
 
terry_b said:
However php v7.2 and php v7.3 use a version of OpenSSl that doesn’t have SSLv2 and SSLv3.
Click to expand...
Oh yea, forgot all about that. Learned that same time when trying to use mcrypt with 7.2. My bad…
 
You must log in or register to reply here.
Back
Top