[Bug 1858971] Re: SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest failures

[Graham Inggs]

** Tags removed: update-excuse

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1858971

Title:
  SECLEVEL=2 & tls1.2-min by default are causing ftbfs / autopkgtest
  failures

Status in cmake package in Ubuntu:
  Fix Released
Status in nodejs package in Ubuntu:
  Fix Released
Status in openssl package in Ubuntu:
  Fix Released
Status in python2.7 package in Ubuntu:
  Fix Released
Status in python3.7 package in Ubuntu:
  Fix Committed
Status in python3.8 package in Ubuntu:
  Fix Committed
Status in ruby-openssl package in Ubuntu:
  Fix Committed
Status in ruby2.5 package in Ubuntu:
  Fix Committed

Bug description:
  SECLEVEL=2 by default is causing ftbfs / autopkgtest failure

  openssl switched to SECLEVEL=2 by default

  Causes:

  SSL_CTX_use_certificate: ca md too weak in ruby2.5 ruby-openssl

  openssl uses tls1.2-min:

  test_ssl failing in python2.7
  ERROR: test_protocol_sslv23 (test.test_ssl.ThreadedTests)
  Connecting to an SSLv23 server with various client options
  ERROR: test_protocol_tlsv1_1 (test.test_ssl.ThreadedTests)
  Connecting to a TLSv1.1 server with various client options.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cmake/+bug/1858971/+subscriptions