[wp-trac] [WordPress Trac] #29816: Some Versions Can't Upgrade to 4.0

[WordPress Trac]

#29816: Some Versions Can't Upgrade to 4.0
--------------------------------+--------------------
 Reporter:  miqrogroove         |       Owner:
     Type:  defect (bug)        |      Status:  new
 Priority:  normal              |   Milestone:  4.0.1
Component:  WordPress.org site  |     Version:
 Severity:  normal              |  Resolution:
 Keywords:                      |     Focuses:
--------------------------------+--------------------

Comment (by Otto42):

 Typically, PHP isn't "bundled" with OpenSSL, as such. OpenSSL is a library
 on the system and PHP's openssl extension often uses that library,
 although it can be compiled statically too. And it's a bit more complex
 than that, because if the curl extension is being used, it may or may not
 be compiled with openssl included within it directly (not using the php
 openssl extension). So, it's rather hard to say with certainty.

 OpenSSL 0.9.8o and 1.0.0a (1 Jun 2010) added the default-to-on support for
 the SHA2 library of algorithms wrt SSL.

 Note that you're talking about two different issues here. The original
 issue, with this error message:
 {{{
 Download failed.: error:0D0890A1:asn1 encoding
 routines:ASN1_verify:unknown message digest algorithm
 }}}
 is caused by an old version of curl w/openssl being used.

 The two new threads you linked to today are caused by outdated root
 certificates, which is separate and solved in WP 3.7 and later. Servers
 can update their root certificates bundle easily enough, but few do, which
 is why 3.7 includes its own copy of the bundle.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29816#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform