s2n-tls icon indicating copy to clipboard operation
s2n-tls copied to clipboard

Revert CI back to OpenSSL 1.1.1 Stable

Open lundinc2 opened this issue 3 years ago • 0 comments

Security issue notifications

If you discover a potential security issue in s2n we ask that you notify AWS Security via our vulnerability reporting page. Please do not create a public github issue.

Problem:

https://github.com/aws/s2n-tls/pull/3368 moved the s2n-ci off of the OpenSSL 1.1.1 stable release to deal with a build regression.

Solution:

Once OpenSSL 1.1.1 stable release is building in the s2n-ci, revert https://github.com/aws/s2n-tls/pull/3368

  • Does this change what S2N sends over the wire? If yes, explain.
  • Does this change any public APIs? If yes, explain.
  • Which versions of TLS will this impact?

Requirements / Acceptance Criteria:

What must a solution address in order to solve the problem? How do we know the solution is complete?

  • RFC links: Links to relevant RFC(s)
  • Related Issues: Link any relevant issues
  • Will the Usage Guide or other documentation need to be updated?
  • Testing: How will this change be tested? Call out new integration tests, functional tests, or particularly interesting/important unit tests.
    • Will this change trigger SAW changes? Changes to the state machine, the s2n_handshake_io code that controls state transitions, the DRBG, or the corking/uncorking logic could trigger SAW failures.
    • Should this change be fuzz tested? Will it handle untrusted input? Create a separate issue to track the fuzzing work.

Out of scope:

Is there anything the solution will intentionally NOT address?

lundinc2 avatar Jun 15 '22 22:06 lundinc2