<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:17:50 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CDRIVER-3370] Provide clearer error when SSL certificates have weak crypto</title>
                <link>https://jira.mongodb.org/browse/CDRIVER-3370</link>
                <project id="10030" key="CDRIVER">C Driver</project>
                    <description>&lt;p&gt;In adding a debian10 Evergreen build variant to the C driver I encountered unexpected failures in SSL-related tests.  Debian 10 ships with OpenSSL 1.1.1c.&lt;/p&gt;

&lt;p&gt;I dug around this a bit and added a call to &quot;ERR_print_errors_fp (stderr);&quot; just before the driver emits the error message that was displayed, and this is what is on the libssl error stack:&lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/21 16:09:58.204&amp;#93;&lt;/span&gt; 140374663296768:error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak:../ssl/ssl_rsa.c:310:&lt;br/&gt;
&lt;span class=&quot;error&quot;&gt;&amp;#91;2019/09/21 16:09:58.204&amp;#93;&lt;/span&gt; 2019/09/21 20:09:58.0204: &lt;span class=&quot;error&quot;&gt;&amp;#91;25219&amp;#93;&lt;/span&gt;:    ERROR: mongoc: Cannot find certificate in &apos;src/libmongoc/tests/x509gen/server.pem&apos;&lt;/p&gt;

&lt;p&gt;The solution appears to be certificates with stronger crypto for the SSL-related tests.&lt;/p&gt;</description>
                <environment></environment>
        <key id="935322">CDRIVER-3370</key>
            <summary>Provide clearer error when SSL certificates have weak crypto</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="4" iconUrl="https://jira.mongodb.org/images/icons/priorities/minor.svg">Minor - P4</priority>
                        <status id="10038" iconUrl="https://jira.mongodb.org/images/icons/subtask.gif" description="">Backlog</status>
                    <statusCategory id="2" key="new" colorName="default"/>
                                    <resolution id="-1">Unresolved</resolution>
                                        <assignee username="-1">Unassigned</assignee>
                                    <reporter username="roberto.sanchez@mongodb.com">Roberto Sanchez</reporter>
                        <labels>
                    </labels>
                <created>Mon, 23 Sep 2019 14:54:50 +0000</created>
                <updated>Fri, 10 Feb 2023 16:15:23 +0000</updated>
                                                                            <component>tests</component>
                    <component>tls</component>
                                        <votes>0</votes>
                                    <watches>3</watches>
                                                                                                                <comments>
                            <comment id="2429091" author="kevin.albertson" created="Mon, 23 Sep 2019 21:33:40 +0000"  >&lt;p&gt;The error on evergreen was resolved in &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-2940&quot; title=&quot;Regenerate test certificates with SHA256 signatures&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-2940&quot;&gt;&lt;del&gt;CDRIVER-2940&lt;/del&gt;&lt;/a&gt;, but the error message is misleading. Let&apos;s update that error message to be more useful and possibly source it from underlying openssl error message.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>CDRIVER-4576</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hvgak7:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>