OpenSSL 3.0
GrahamCampbell opened this issue · 0 comments
OpenSSL 1.1 will be end of life in September 2023. PHP 8.1 and 8.2 support OpenSSL 3.0. It would be great if we could switch over to OpenSSL 3.0. This would have required more lift on Bref v1 due to sharing of the base images, but Bref v2 does not have this same sharing, so it is going to be easier to make this change only for PHP 8.1 and 8.2, and not 8.0.
FYI, I'm opening this issue with the intention to provide a PR for this, soon, unless there is an objection to making this change.
FYI2 - unfortunately the end of life for PHP 8.0 is after the end of life for any OpenSSL version that PHP 8.0 is compatible with. Maybe we should consider dropping PHP 8.0 support a little before the PHP 8.0 EOL in November 2023, as soon as OpenSSL 1.1 no longer will receive security patches, helping to encourage people to upgrade to PHP 8.1, so they are not in a huge mess if there's a vulnerability discovered, and there's no easy upgrade path to patch it.