This bug was fixed in the package python-glanceclient -
1:2.17.0-0ubuntu3
---
python-glanceclient (1:2.17.0-0ubuntu3) focal; urgency=medium
* d/p/update-test-certificates.patch: Regenerate test certificates
to use algorithms that are considered secure by modern OpenSSL
Uploaded to focal for release team review.
Also submitted upstream - https://review.opendev.org/718093
** Changed in: python-glanceclient (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which
Actually this resolved to be due to use of older algs in the certs which
are no longer considered strong.
** Changed in: openssl (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl
Or this might be related to the default security level we set in Ubuntu
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1870074
Title:
python-glanceclient ftbfs in focal
and
https://github.com/openssl/openssl/issues/11378
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1870074
Title:
python-glanceclient ftbfs in focal
Status in openssl
https://github.com/urllib3/urllib3/issues/1825
** Bug watch added: github.com/urllib3/urllib3/issues #1825
https://github.com/urllib3/urllib3/issues/1825
** Bug watch added: github.com/openssl/openssl/issues #11378
https://github.com/openssl/openssl/issues/11378
--
You received this bug
Boiling those down from the package build log:
glanceclient.tests.unit.test_ssl.TestHTTPSVerifyCert.test_v2_requests_valid_cert_no_key
OpenSSL.SSL.Error: [('SSL routines', 'SSL_CTX_use_certificate', 'ca md
too weak')]
'ca md too weak' would indicate the signing alg is not good enough on
the ca.crt any longer:
Signature Algorithm: sha1WithRSAEncryption
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
glanceclient.tests.unit.test_ssl.TestHTTPSVerifyCert.test_v2_requests_valid_cert_no_key
glanceclient.exc.CommunicationError: SSL Error communicating with
https://0.0.0.0:58534/v2/images/image123: [('SSL routines',
'SSL_CTX_use_certificate', 'ca md too weak')]
** Also affects: openssl (Ubuntu)
9 matches
Mail list logo
