Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed #4380 -- do not assume TLSv1 is available in OpenSSL #4389

Merged
merged 2 commits into from Aug 12, 2018

Conversation

alex
Copy link
Member

@alex alex commented Aug 12, 2018

Hallelujah! It's starting to become the case that some OpenSSLs are disabling it.

@tiran Can you please verify this fixes the tests?

Hallelujah! It's starting to become the case that some OpenSSLs are disabling it.
@tiran
Copy link
Contributor

tiran commented Aug 12, 2018

Yes, the change fixes the problem, but for a different reason. Fedora 29 has started to use more aggressive crypto policies.

Also please check the error stack. In my case, SSL_CTX_new() returned a non-NULL SSL_CTX struct, but also an error on the error stack. ssl_ctx_system_config is a void function and cannot return error code for issues with openssl.cnf

@alex
Copy link
Member Author

alex commented Aug 12, 2018

Green tests and landing is blocked on #4388

@tiran
Copy link
Contributor

tiran commented Aug 12, 2018

tests/hazmat/backends/test_openssl.py contains another call to TLSv1_method.

@reaperhulk reaperhulk merged commit 525b654 into master Aug 12, 2018
@reaperhulk reaperhulk deleted the alex-patch-1 branch August 12, 2018 19:48
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 7, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants