| 2019-04-03 10:43:31 |
Dimitri John Ledkov |
bug |
|
|
added bug |
| 2019-04-03 10:43:44 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Cosmic |
|
| 2019-04-03 10:43:44 |
Dimitri John Ledkov |
bug task added |
|
openssl (Ubuntu Cosmic) |
|
| 2019-04-03 10:43:44 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Disco |
|
| 2019-04-03 10:43:44 |
Dimitri John Ledkov |
bug task added |
|
openssl (Ubuntu Disco) |
|
| 2019-04-03 11:07:46 |
Dimitri John Ledkov |
openssl (Ubuntu Disco): status |
New |
Fix Committed |
|
| 2019-04-03 16:25:22 |
Dimitri John Ledkov |
description |
[Impact]
* increase minimum default tls security level from 0 to 1, as is the default upstream
[Test Case]
* generate 80bits TLS certificate and attempt to use it
* with prior openssl it should work, but with this update it should fail
[Regression Potential]
* This increases the minimum required certificate/keys sizes and algorithms, back to what Bionic GA openssl 1.1.0 shipped as. It also now will match upstream default. It is still lower than Debian's default that raises it to 2 by default. |
[Impact]
* increase minimum default tls security level from 0 to 1, as is the default upstream
[Test Case]
* generate 80bits TLS certificate and attempt to use it
* with prior openssl it should work, but with this update it should fail
[Regression Potential]
* This increases the minimum required certificate/keys sizes and algorithms, back to what Bionic GA openssl 1.1.0 shipped as. It also now will match upstream default. It is still lower than Debian's default that raises it to 2 by default.
* Cosmic GA shipped with TLS_SECURITY_LEVEL 0, meaning pretty much any weak keys were accepted. With this change keys lower than 112 will be rejected, which are considered to be too weak to be useful by most CAs out there. |
|
| 2019-04-03 19:38:41 |
Dimitri John Ledkov |
openssl (Ubuntu Cosmic): status |
New |
In Progress |
|
| 2019-04-04 06:05:39 |
Launchpad Janitor |
openssl (Ubuntu Disco): status |
Fix Committed |
Fix Released |
|
| 2019-04-05 08:46:21 |
Timo Aaltonen |
openssl (Ubuntu Cosmic): status |
In Progress |
Fix Committed |
|
| 2019-04-05 08:46:22 |
Timo Aaltonen |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2019-04-05 08:46:24 |
Timo Aaltonen |
bug |
|
|
added subscriber SRU Verification |
| 2019-04-05 08:46:28 |
Timo Aaltonen |
tags |
|
verification-needed verification-needed-cosmic |
|
| 2019-04-11 16:20:54 |
Dimitri John Ledkov |
tags |
verification-needed verification-needed-cosmic |
verification-done verification-done-cosmic |
|
| 2019-06-03 08:48:02 |
Launchpad Janitor |
openssl (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2019-06-03 08:48:12 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
