Your message dated Wed, 19 Apr 2023 01:12:05 +0000
with message-id
<caeri_igfpcs78f3lbay6lklf351aia2bvt9edl_xpjmgmvk...@mail.gmail.com>
and subject line Certbot bug cleanup
has caused the Debian Bug report #950735,
regarding certbot: auto-generated config re-enables TLSv1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
950735: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=950735
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: certbot
Version: 0.31.0-1
Severity: normal
Dear Maintainer,
certbot auto-generates the file /etc/letsencrypt/options-ssl-apache.conf and
then includes this file in my apache2 configuration.
As a result, TLSv1 is re-enabled although I had said
SSLProtocol -all +TLSv1.3 +TLSv1.2
in /etc/apache2/conf-enabled/local.conf
As a result, a lot of web sites out there may be unaware that they still
support TLSv1 although their apache2 configuration seems to disable it.
-- System Information:
Debian Release: 10.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-6-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages certbot depends on:
ii python3 3.7.3-1
ii python3-certbot 0.31.0-1
certbot recommends no packages.
Versions of packages certbot suggests:
pn python-certbot-doc <none>
ii python3-certbot-apache 0.31.0-1
pn python3-certbot-nginx <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Closing Debian bugs that are too old to be relevant anymore, or have
been fixed by upstream in a release currently in Debian stable.
--
Harlan Lieberman-Berg
~hlieberman
--- End Message ---
