Dear BioC community,

We were recently informed that a multilayered bug due to an increased security 
level in Ubuntu 20.04, configuration issues on server side and a bug in OpenSSL 
1.1.1 caused our packages to fail on Ubuntu 20.04 with the following error:

   error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

This affects the two packages I maintain, rfaRm and ncRNAtools. As a temporary 
fix, we were suggested to use HTTP instead of HTTPS. However, some of the web 
resources accessed with our packages do not seem to be accessible via HTTP. 
This is reflected in the latest build for rfaRm for example 
(http://bioconductor.org/checkResults/devel/bioc-LATEST/rfaRm/) , which fails 
as a consequence of all the URLs being changed to the “http” version instead of 
“https”.

The problem seems to have been discussed here 
https://github.com/Ensembl/ensembl-rest/issues/427 , with a temporary fix 
suggested here 
https://askubuntu.com/questions/1233186/ubuntu-20-04-how-to-set-lower-ssl-security-level
 . However, this seems to involve changing some openssl options through the 
openssl config file. We are unsure on whether this temporary fix could be 
implemented from within our package. We would greatly appreciate any guidance 
on how to implement it, or on any other alternative temporary workarounds.

Thanks a lot in advance!

Best wishes,

Lara

        [[alternative HTML version deleted]]

_______________________________________________
Bioc-devel@r-project.org mailing list
https://stat.ethz.ch/mailman/listinfo/bioc-devel

Reply via email to