[Bug 1899878] Re: Python's test_ssl fails starting from Ubuntu 20.04

[Kurt Roeckx]

I was expecting SSL_CTX_get_min_proto_version() to return the default
value (TLS1_2_VERSION). It's currently documented that 0 means the
lowest supported by the library. If it returns 0 and the library
supports TLS 1.0, it should be able to negotiate TLS 1.0.

On reflection, I'm not sure that for the get function 0 is ever a good
value to return, it should always return a version.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1899878

Title:
  Python's test_ssl fails starting from Ubuntu 20.04

Status in openssl package in Ubuntu:
  Incomplete

Bug description:
  Please take a look at https://bugs.python.org/issue41561. Developers
  who work on Python think that the issue is due to a change in Ubuntu
  20.04 that is best described by
  https://bugs.python.org/issue41561#msg378089:

  "It sounds like a Debian/Ubuntu patch is breaking an assumption. Did
  somebody report the bug with Debian/Ubuntu maintainers of OpenSSL
  already? Fedora also configures OpenSSL with minimum protocol version
  of TLS 1.2. The distribution does it in a slightly different way that
  makes the restriction discoverable and that is compatible with
  Python's test suite."

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878/+subscriptions