Regarding regressions: I believe that the "soak testing" of the fix in
stretch and zesty gives a reasonable indication that this works fine for
normal users (or nobody uses it...). There can be regressions of course,
but this essentially makes the behaviour of the compat bindings
equivalent to the normal gnutls behaviour.

In any case, regressions could happen for TLS 1.0 servers. That said,
any regression should be very limited considering that servers often do
not negotiate that any more and that TLS 1.0 is horribly insecure.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1709193

Title:
  Unable to use TLSv1.1 or 1.2 with OpenSSL compat layer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/1709193/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to