Comment 0 for bug 1822984

Revision history for this message
Dimitri John Ledkov (xnox) wrote :

[Impact]
* increase minimum default tls security level from 0 to 1, as is the default upstream

[Test Case]

* generate 80bits TLS certificate and attempt to use it

* with prior openssl it should work, but with this update it should fail

[Regression Potential]

* This increases the minimum required certificate/keys sizes and algorithms, back to what Bionic GA openssl 1.1.0 shipped as. It also now will match upstream default. It is still lower than Debian's default that raises it to 2 by default.