[Bug 1858971] Re: SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest failures

[Dimitri John Ledkov]

Something odd is happening with openssh tests =/

22:35:08.766049714 O: trace: certified host keys: host rsa-sha2-512 revoked cert
22:35:08.767645798 O: FAIL: ssh cert connect cert not yet valid succeeded unexpectedly
22:35:08.769149660 O: FAIL: ssh cert connect cert not yet valid succeeded unexpectedly

** Also affects: openssh (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python2.7 in Ubuntu.
https://bugs.launchpad.net/bugs/1858971

Title:
  SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest
  failures

Status in openssh package in Ubuntu:
  New
Status in openssl package in Ubuntu:
  New
Status in python2.7 package in Ubuntu:
  New
Status in ruby-openssl package in Ubuntu:
  New
Status in ruby2.5 package in Ubuntu:
  New

Bug description:
  SECLEVEL=2 by default is causing ftbfs / autopkgtest failure

  openssl switched to SECLEVEL=2 by default

  Causes:

  SSL_CTX_use_certificate: ca md too weak in ruby2.5 ruby-openssl

  openssl uses tls1.2-min:

  test_ssl failing in python2.7
  ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
  Connecting to an SSLv23 server with various client options
  ERROR: test_protocol_tlsv1_1 (test.test_ssl.ThreadedTests)
  Connecting to a TLSv1.1 server with various client options.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1858971/+subscriptions