Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Correct NEWS entry about required security level for old versions of TLS, DTLS and SSL #18234

Closed
wants to merge 1 commit into from

Conversation

paulidale
Copy link
Contributor

@paulidale paulidale commented May 4, 2022

The entry was incorrect because suites using RSA key exchange without SHA1 were permitted at security level 1.

Partial fix for #18194

…TLS, DTLS and SSL

The entry was incorrect because suites using RSA key exchange without SHA1
were permitted at security level 1.

Partial fix for openssl#18194
@paulidale paulidale added approval: review pending This pull request needs review by a committer approval: otc review pending This pull request needs review by an OTC member triaged: documentation The issue/pr deals with documentation (errors) branch: 3.0 Merge to openssl-3.0 branch labels May 4, 2022
@paulidale paulidale self-assigned this May 4, 2022
@paulidale paulidale added the branch: master Merge to master branch label May 4, 2022
@t8m t8m removed the approval: otc review pending This pull request needs review by an OTC member label May 4, 2022
@slontis slontis added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels May 5, 2022
@paulidale
Copy link
Contributor Author

Merged to both branches. Thanks.

@paulidale paulidale closed this May 6, 2022
openssl-machine pushed a commit that referenced this pull request May 6, 2022
…TLS, DTLS and SSL

The entry was incorrect because suites using RSA key exchange without SHA1
were permitted at security level 1.

Partial fix for #18194

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from #18234)
openssl-machine pushed a commit that referenced this pull request May 6, 2022
…TLS, DTLS and SSL

The entry was incorrect because suites using RSA key exchange without SHA1
were permitted at security level 1.

Partial fix for #18194

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from #18234)

(cherry picked from commit 3226a37)
@paulidale paulidale deleted the 18194-30 branch May 6, 2022 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approval: done This pull request has the required number of approvals branch: master Merge to master branch branch: 3.0 Merge to openssl-3.0 branch triaged: documentation The issue/pr deals with documentation (errors)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants