Comment 3 for bug 1917625

Revision history for this message
Dimitri John Ledkov (xnox) wrote :

Please note that:

OpenSSL upstream security level 3 only allows TLS v1.1 and above
OpenSSL upstream security level 4 only allows TLS v1.2 and above, DTLS v1.2 and above

On Ubuntu, these restrictions are brought in earlier at security level 2.

Thus, if one builds upstream OpenSSL with security level set to 4 all of the above testsuite should be failing as well.

I feel there is lack of API documentation about this in OpenSSL.

Also, Python tests are incomplete and are not testing for, or setting appropriate security levels for the protocols they are attempting to use. Thus are not using the OpenSSL api correctly and making assumptions about the openssl library that are out of date with current standards and requirements.