[Bug 1822984] [NEW] revert tls security level back to 1
Dimitri John Ledkov
launchpad at surgut.co.uk
Wed Apr 3 10:43:31 UTC 2019
Public bug reported:
[Impact]
* increase minimum default tls security level from 0 to 1, as is the default upstream
[Test Case]
* generate 80bits TLS certificate and attempt to use it
* with prior openssl it should work, but with this update it should fail
[Regression Potential]
* This increases the minimum required certificate/keys sizes and
algorithms, back to what Bionic GA openssl 1.1.0 shipped as. It also now
will match upstream default. It is still lower than Debian's default
that raises it to 2 by default.
** Affects: openssl (Ubuntu)
Importance: Undecided
Status: New
** Affects: openssl (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Affects: openssl (Ubuntu Disco)
Importance: Undecided
Status: New
** Also affects: openssl (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Also affects: openssl (Ubuntu Disco)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1822984
Title:
revert tls security level back to 1
Status in openssl package in Ubuntu:
New
Status in openssl source package in Cosmic:
New
Status in openssl source package in Disco:
New
Bug description:
[Impact]
* increase minimum default tls security level from 0 to 1, as is the default upstream
[Test Case]
* generate 80bits TLS certificate and attempt to use it
* with prior openssl it should work, but with this update it should
fail
[Regression Potential]
* This increases the minimum required certificate/keys sizes and
algorithms, back to what Bionic GA openssl 1.1.0 shipped as. It also
now will match upstream default. It is still lower than Debian's
default that raises it to 2 by default.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1822984/+subscriptions
More information about the foundations-bugs
mailing list