Bug 1025598 – Openssl advertises support for curves it doesn't actually support in Client Hello

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1025598 - Openssl advertises support for curves it doesn't actually support in Client Hello

Summary:	Openssl advertises support for curves it doesn't actually support in Client H...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 6
Classification:	Red Hat
Component:	openssl (Show other bugs)
Sub Component:
Version:	6.6
Hardware:	All Linux

Priority	high Severity urgent
Target Milestone:	rc
Target Release:	---
Assigned To:	Tomas Mraz
QA Contact:	Hubert Kario
Docs Contact:

URL:
Whiteboard:
Keywords:	ZStream

Depends On:	1022468
Blocks:
	Show dependency tree / graph

Reported:	2013-10-31 23:49 EDT by Jan Kurik
Modified:	2013-12-26 06:56 EST (History)
CC List:	11 users (show)

See Also:
Fixed In Version:	openssl-1.0.1e-16.el6_5
Doc Type:	Bug Fix
Doc Text:	Prior to this update, the Transport Layer Security (TLS) client advertised support for some elliptic curves that are not supported by it. As a consequence, server could choose unsupported elliptic curve and client would not be able to communicate with the server over the TLS. With this update, OpenSSL TLS client advertises only the curves that are supported by it, and TLS communication with server (using also curves not supported by the Red Hat Enterprise Linux OpenSSL TLS client) can now be established.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2013-11-21 19:25:47 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Knowledge Base (Solution)	655233	None	None	None	Never
Red Hat Product Errata	RHBA-2013:1751	normal	SHIPPED_LIVE	openssl bug fix update	2013-11-21 04:13:17 EST

Groups: None (edit)

Description Jan Kurik 2013-10-31 23:49:32 EDT

This bug has been copied from bug #1022468 and has been proposed
to be backported to 6.5 z-stream (EUS).

Comment 12 errata-xmlrpc 2013-11-21 19:25:47 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-1751.html

Note You need to log in before you can comment on or make changes to this bug.