>From the Apache 2.2 documentation:

TLSv1.1 (when using OpenSSL 1.0.1 and later)
A revision of the TLS 1.0 protocol, as defined in RFC 4346.

TLSv1.2 (when using OpenSSL 1.0.1 and later)
A revision of the TLS 1.1 protocol, as defined in RFC 5246.

I suspect that the issue is that the current version of Apache 2.2 in
12.04.5 LTS incorrectly thinks that OpenSSL is not quite at 1.0.1,
despite the fact that it clearly is reported to be that way when I run
dpkg-configure:

root@db3:~# dpkg-query  --list apache2 openssl
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                   Version                Description
+++-======================-======================-============================================================
ii  apache2                2.2.22-1ubuntu1.7      Apache HTTP Server metapackage
ii  openssl                1.0.1-4ubuntu5.21      Secure Socket Layer (SSL) 
binary and related cryptographic t


I am reasonably comfortable that this issue is not really a show-stopper 
anymore, but rather some sort of minor package compilation related quirk that 
does not really change any functionality.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1400473

Title:
  Apache 2.2 on Ubuntu 12.04 LTS doesn't allow disabling TLS1.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1400473/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to