[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
This was already replied by Seth Arnold. Additionally, what was missing was "to remove '-ssl2' from the usage string and man pages". This is also already done (checked on both 20.04/focal and 22.04/jammy). ** Changed in: openssl (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in openssl package in Ubuntu: Fix Released Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
Moses, we've already released updates for the March 2016 roundup of issues from OpenSSL http://www.ubuntu.com/usn/usn-2914-1/ . We do not ship point updates from OpenSSL for security updates because they sometimes break ABI or introduce other regressions (see e.g. https://bugs.gentoo.org/show_bug.cgi?id=576128 ). Note that since we've disabled SSLv2 for years DROWN did not apply to our packages, but of course the other issues did. If you wish to prepare a debdiff that removes the -ssl2 options from manpages and so on we'd consider including it in future updates. It's not a high priority for us so we're unlikely to get to it. Thanks ** Bug watch added: Gentoo Bugzilla #576128 https://bugs.gentoo.org/show_bug.cgi?id=576128 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in openssl package in Ubuntu: Confirmed Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
Still here in Ubuntu 14.04.4 LTS and openssl 1.0.1f-1 Expecting 1.0.1g to arrive soon after the announcement of the DROWN exploit. The cheap fix would be to remove '-ssl2' from the usage string and man pages. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in openssl package in Ubuntu: Confirmed Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
Looks like this is the cause: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589706 ** Bug watch added: Debian Bug tracker #589706 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589706 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in openssl package in Ubuntu: Confirmed Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args snipped aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
Ubuntu 14.04 openssl 1.0.1f Still a pain not to have ssl2 as an option. It's useful for evidence in compliance reports. The only work around I have come across is compiling from source with the option included. Here's a link to the blog I found with a workaround: http://blog.opensecurityresearch.com/2013/05/fixing-sslv2-support-in- kali-linux.html -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in openssl package in Ubuntu: Confirmed Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args snipped aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 955675] Re: openssl s_client's '-ssl2' option no longer works in 12.04
Is this going to be fixed somehow? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/955675 Title: openssl s_client's '-ssl2' option no longer works in 12.04 Status in “openssl” package in Ubuntu: Confirmed Bug description: the s_client(1) man page describes -tls1, -ssl3 and -ssl2. The latter isn't recognised by openssl in 12.04: aj@aj-Vostro-260:~$ openssl version OpenSSL 1.0.0g 18 Jan 2012 aj@aj-Vostro-260:~$ openssl s_client -ssl2 unknown option -ssl2 usage: s_client args snipped aj@aj-Vostro-260:~$ openssl s_client -ssl3 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ openssl s_client -tls1 connect: Connection refused connect:errno=111 aj@aj-Vostro-260:~$ This option should still continue to work, please do not leave disabled. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/955675/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
