Bug 1335931
Summary: | gnutls: Disable TLS connections with less than 1024-bit DH parameters | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Nikos Mavrogiannopoulos <nmavrogi> |
Component: | gnutls | Assignee: | Nikos Mavrogiannopoulos <nmavrogi> |
Status: | CLOSED ERRATA | QA Contact: | Stefan Dordevic <sdordevi> |
Severity: | unspecified | Docs Contact: | Mirek Jahoda <mjahoda> |
Priority: | unspecified | ||
Version: | 7.4 | CC: | mgrepl, sdordevi, szidek |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | gnutls-3.3.26-1.el7 | Doc Type: | Deprecated Functionality |
Doc Text: |
*GnuTLS* clients will not negotiate less than 1024-bit Diffie Hellman parameters
This change prevents GNU Transport Layer Security (GnuTLS) clients from connecting to servers with Diffie-Hellman (DH) parameters less than 1024 bits. This ensures that allowed clients using *GnuTLS* are not vulnerable to attacks such as the LOGJAM attack.
On applications which accept directly priority string from the user or configuration, this change can be reverted by appending the priority string %PROFILE_VERY_WEAK to the used priority string.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2017-08-01 08:48:22 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1335929, 1377248 |
Description
Nikos Mavrogiannopoulos
2016-05-13 14:50:13 UTC
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:2292 |