Different OpenSSL version

Is there a way to downgrade OpenSSL that is included with the .exe?

I need to be able to use cURL with SSLv3 for the application I’m working on.

Thank you!

Terry

You could try to replace the DLL files in the correct PHPRuntimeXX folder of ExeOutput. Then, clear the cache in the Environment Options to force ExeOutput to recompress PHP runtime files.

1 Like

I see two files that I would need to replace (for php v7.3):

  • libssl-1_1.dll
  • libcrypto-1_1.dll

However, in older OpenSSL, there’s no libcrypto-x-y.dll file.

Some new files were added to PHP in recent releases. You’ll have to compare PHP distro files from php.net

1 Like

I’ve compared php 7.1 and php 7.3. There are indeed two files that seem to be different between the two versions. However I have no clue how to proceed since I’d like to have php 7.3 run with an older openssl.

Maybe way out in left field, but have you tried encouraging CURL to use SSLV3? Something like:

curl_setopt($ch, CURLOPT_SSLVERSION, 3);
curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');

Have not tried this with PHP 7.3. Used it couple of years ago with success though…

1 Like

oldteacher: Yes, that will work but only if SSLv3 is included with OpenSSL. However php v7.2 and php v7.3 use a version of OpenSSl that doesn’t have SSLv2 and SSLv3.

Oh yea, forgot all about that. Learned that same time when trying to use mcrypt with 7.2. My bad…