php/php-src — pull request #483 by rdlowrey (2013-10-08 18:18:54+00:00)
Title: Add TLSv1.1 and TLSv1.2 support

This patch adds TLSv1.1 and TLSv1.2 functionality for encrypted clients and servers. Note that the first OpenSSL version with support for these newer protocols is v1.0.1 and PHP must be built against this version or the new functionality is unavailable.

> **IMPORTANT:** `ext/openssl` segfaults when built against OpenSSLv1.0.1 so this patch requires/includes the patch specified in [PR 481](https://github.com/php/php-src/pull/481) to function correctly.

Quick Reference on SSL/TLS:

> - SSL v2 is insecure and must not be used.
> - SSL v3 is very old and obsolete. Because it lacks some key features and because virtually all clients
> support TLS 1.0 and better, you should not support SSL v3 unless you have a very good reason.
> - TLS v1.0 is largely still secure; we do not know of major security ﬂaws when they are used for
> protocols other than HTTP. When used with HTTP, it can almost be made secure with careful
> conﬁguration.
> - TLS v1.1 and v1.2 are without known security issues.

-- [*SSL/TLS Deployment Best Practices*](https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.3.pdf)