[Bug 1872778] Re: update-crypto-policies not affecting Gnome Online Accounts

[Adrien Nader]

crypto-policies is RH-specific. While the tool can be ported/installed,
all the connections from other software to it does not exist in other
systems. Closing the issue for gnutls28.

NB: I've been working on https://github.com/canonical/crypto-config/
which answers similar needs but the issue here is about re-enabling TLS
1.1 and 1.2 which I'm not very in favor of but I'm curious to hear from
you if you still need it (I know the email ecosystem moves more slowly
than the web one and that adaptations are needed).

** Changed in: gnutls28 (Ubuntu)
       Status: Confirmed => Triaged

** Changed in: gnutls28 (Ubuntu)
       Status: Triaged => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnutls28 in Ubuntu.
https://bugs.launchpad.net/bugs/1872778

Title:
  update-crypto-policies not affecting Gnome Online Accounts

Status in gnome-online-accounts package in Ubuntu:
  Incomplete
Status in gnutls28 package in Ubuntu:
  Won't Fix

Bug description:
  -crypto-policies 20190816git-1
  -gnome-online-accounts 3.36.0-1ubuntu1

  Changing between DEFAULT, LEGACY, and EMPTY has no affect on attempts
  to connect to accounts through Online Accounts.

  Changing to LEGACY or EMPTY should at least change the following
  error:

  Error performing TLS handshake: The Diffie-Hellman prime sent by the
  server is not acceptable (not long enough).

  Under either LEGACY or EMPTY the (not long enough) error is
  nonsensical. The persistence of the incorrect error message could
  imply that gnome-online-accounts is not respecting settings made by
  crypto-policies.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-online-accounts/+bug/1872778/+subscriptions