[Bug 1858971] Re: SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest failures

[Dimitri John Ledkov]

nodejs small keys

Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too
small

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python2.7 in Ubuntu.
https://bugs.launchpad.net/bugs/1858971

Title:
  SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest
  failures

Status in openssh package in Ubuntu:
  New
Status in openssl package in Ubuntu:
  New
Status in python2.7 package in Ubuntu:
  New
Status in ruby-openssl package in Ubuntu:
  New
Status in ruby2.5 package in Ubuntu:
  New

Bug description:
  SECLEVEL=2 by default is causing ftbfs / autopkgtest failure

  openssl switched to SECLEVEL=2 by default

  Causes:

  SSL_CTX_use_certificate: ca md too weak in ruby2.5 ruby-openssl

  openssl uses tls1.2-min:

  test_ssl failing in python2.7
  ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
  Connecting to an SSLv23 server with various client options
  ERROR: test_protocol_tlsv1_1 (test.test_ssl.ThreadedTests)
  Connecting to a TLSv1.1 server with various client options.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1858971/+subscriptions