Modify ↓

Ticket #3255 (closed defect: wontfix)

Opened 20 months ago

Last modified 20 months ago

move from OpenSSL to GnuTLS in order to enable TLS 1.2

Reported by: graylion@… Owned by: jsalamero@…
Milestone: Component: webserver
Severity: normal Keywords:
Cc:

Description

As shown in this article  http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/ OpenSSL only offers mock security, whereas GnuTLS actually supports TLS 1.2. This should be reason enough to migrate to a platform that is actually secure.

Attachments

Change History

comment:2 Changed 20 months ago by jsalamero@…

  • Status changed from new to closed
  • Resolution set to wontfix

We wont change the default Ubuntu configuration on this, as soon as Ubuntu moves to (or at least supports in its LTS release) GnuTLS with TLS 1.2 we will do so.

View ↑

Add a comment

Modify Ticket

Change Properties
<Author field>
Action
as closed
The resolution will be deleted. Next status will be 'reopened'
Author


E-mail address and user name can be saved in the Preferences.

Attachments ↑
 
Note: See TracTickets for help on using tickets.