I see the different versions on running this terminal

echo '<?php phpinfo(); ?>' | php 2>&1 |grep -i ssl

Registered Stream Socket Transports => tcp, udp, unix, udg, ssl, sslv2, tls, tlsv1.0, tlsv1.1, tlsv1.2
SSL => Yes
SSL Version => OpenSSL/1.0.1f
core SSL => supported
extended SSL => supported
OpenSSL support => enabled
OpenSSL Library Version => OpenSSL 1.1.0g  2 Nov 2017
OpenSSL Header Version => OpenSSL 1.1.0g  2 Nov 2017
Openssl default config => /usr/lib/ssl/openssl.cnf
openssl.cafile => no value => no value
openssl.capath => no value => no value
Native OpenSSL support => enabled

closed as unclear what you're asking by Tero Kilkanen, Jenny D, kasperd, MadHatter, mdpc Jan 4 '18 at 0:11

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Please show the complete output of phpinfo(). – Tero Kilkanen Dec 26 '17 at 11:41
  • Thanks for looking into this I have pasted it here pastebin.com/4F6HTjGr – venu Bondugula Dec 28 '17 at 7:31
  • 1
    Please add this information to the question itself, not to an external site where the information might be eventually lost. – Tero Kilkanen Dec 28 '17 at 7:42

You are seeing the versions of two different pieces of PHP.

The first output is for the curl module. PHP's curl interface uses the curl library provided by the OS, which then uses the OpenSSL library it is linked against, in this case 1.0.1f.

Then, PHP has a direct OpenSSL interface, which is linked against version 1.1.0g.

If you want curl to use a newer OpenSSL version, you need to upgrade your curl library, and make sure PHP's curl module uses the newer library.

  • Ok understood. I want to my PHP to use OpenSSL of version 1.0.1f, what should I do for that? – venu Bondugula Dec 28 '17 at 13:48
  • The actual issue I'm facing is I'm trying to use DSS1 algorithm to sign some data and I want to get that algorithm from the output of openssl_get_md_methods(). Bu with this setup the output of this method is pastebin.com/9hmP4DtQ But in another setup, I have both the SSL versions same(1.0.1f with php vesion 5.5.9) where the response of that method is pastebin.com/TD2p4xDU – venu Bondugula Dec 28 '17 at 14:21
  • You should actually open another question when the question changes like this. However, according to github.com/sparkle-project/Sparkle/issues/1132, you can use SHA1 instead of DSS1. This also explains why this change happened. Another option is to find a PHP version that uses OpenSSL 1.0.1f, however it is not recommended to use previous versions of software. – Tero Kilkanen Dec 29 '17 at 7:54

Not the answer you're looking for? Browse other questions tagged or ask your own question.