[wp-trac] [WordPress Trac] #34924: Network upgrade fails on tls 1.2 only servers

WordPress Trac noreply at wordpress.org
Wed Mar 30 06:41:16 UTC 2016


#34924: Network upgrade fails on tls 1.2 only servers
--------------------------------+------------------------------
 Reporter:  mensmaximus         |       Owner:
     Type:  defect (bug)        |      Status:  new
 Priority:  normal              |   Milestone:  Awaiting Review
Component:  HTTP API            |     Version:  2.7
 Severity:  normal              |  Resolution:
 Keywords:  https dev-feedback  |     Focuses:  multisite
--------------------------------+------------------------------

Comment (by rmccue):

 Replying to [comment:12 dd32]:
 > @rmccue What are your thoughts on this issue?

 Streams can potentially also be broken, as they have their own version of
 OpenSSL which could be out-of-date (or worse).

 I'd be +1 on trying a fallback if we hit a SSL connection issue, whether
 that fallback is changing the cURL option or falling back to streams.

 With regards to the actual issue itself: it seems like cURL is unable to
 negotiate TLS instead of SSL? I'm not sure why setting the constant makes
 this work whereas it's unable to without it?

 (I'm happy to also drop support for SSL in favour of TLS-only.)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34924#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list