Bug 39158 – move DH parameters into common package

Bug 39158 - move DH parameters into common package


Summary:	move DH parameters into common package

Status:	RESOLVED WONTFIX

Product:	UCS
Classification:	Unclassified
Component:	SSL
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.x
Assigned To:	UCS maintainers
QA Contact:

URL:
Keywords:

Depends on:	37459
Blocks:	38685
	Show dependency tree / graph

Reported:	2015-08-12 16:33 CEST by Daniel Tröder
Modified:	2019-01-03 07:18 CET (History)
CC List:	8 users (show)

See Also:
What kind of report is it?:	Security Issue
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Tröder

2015-08-12 16:33:17 CEST

+++ This bug was initially created as a clone of Bug #37459 +++

At least univention-ldap and univention-mail-postfix (apache?) use their own DH parameters files and maintain scripts for them. This could be moved into a common package like univention-ssl.

Comment 1 Arvid Requate

2015-08-12 22:56:25 CEST

Good idea.

univention-apache doesn't currently use it (SSLOpenSSLConfCmd DHParameters directive missing in apache < 2.4.8. In the latest Debian wheezy security update 2.2.22-13+deb7u5 the DH parameters can only be catted to the end of the SSLCertificateFile, but we may not want to automate that).

Comment 2 Stefan Gohmann

2019-01-03 07:18:47 CET

This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018.

Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.