SSL failing due to small DH key
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Percona XtraDB Cluster moved to https://jira.percona.com/projects/PXC |
New
|
Undecided
|
Unassigned |
Bug Description
Opening a fresh bug report on Cluster as the issue has been marked as Fix Released on standalone but there have been no coding changes on github for cluster to implement the fix.
Please see https:/
This issue should be considered a significant security issue as the only workarounds are to not use ssl connections, use a non DH cipher or not upgrade openssl to an affected version (which introduces it's own set of security issues).
Please port the patch from Percona Server to Cluster and issue a security release. This is a month old at this point and needs to be resolved as soon as possible.
information type: | Private Security → Public Security |
Percona now uses JIRA for bug reports so this bug report is migrated to: https:/ /jira.percona. com/browse/ PXC-1836