Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-34418

Disable GCM encryption with ESE on OS X with OpenSSL

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.6.5, 3.7.4
    • Component/s: Security
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Backport Requested:
      v3.6, v3.4
    • Epic Link:
    • Sprint:
      Platforms 2018-04-23
    • Linked BF Score:
      20

      Description

      ESE on OS X has not historically supported AES256-GCM. This is because it used an old version of OpenSSL. Going forward, it's native cryptography will not support GCM. When built with a new copy of OpenSSL, it should continue to not support GCM to maintain compatibility with the native cryptography.

        Attachments

          Issue Links

          has to be finished together with

          Task - A task that needs to be done. SERVER-34390 Make OS X binaries speak TLS 1.2

          • Major - P3 - Major loss of function.
          • Closed

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: