New issue
Advanced search Search tips

Issue 667806 link

Starred by 2 users
Status: Fixed
Owner:
agl@chromium.org
Closed: Nov 2016
Cc:
davidben@chromium.org
awhalley@chromium.org
Components:
EstimatedDays: ----
NextAction: 2016-11-23
OS: All
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Advertising support for RSA-PSS in TLS is breaking sites running old Oracle software

Project Member Reported by agl@chromium.org, Nov 22 2016 
In order to give these sites more time to update, this change may need to be moved to M56.

BoringSSL has branched at 0d81373f, which is the revision included in M55, and a revert is pending at https://boringssl-review.googlesource.com/#/c/12420/.

Comment 1 by gov...@chromium.org, Nov 22 2016 

A friendly reminder that M55 Stable is launch is coming soon! Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and get it merged into the release branch latest by November 25th, 5:00 PM PST in order to make into the desktop Stable final build cut. Thank you!

Comment 2 by agl@chromium.org, Nov 22 2016

Labels: Merge-Request-55
This change has landed on a BoringSSL branch. The DEPS file for M55 will need to change for BoringSSL from 0d81373f9169637ff935449227be924c08bf1ec5 to 78684e5b222645828ca302e56b40b9daff2b2d27 once approved.


commit 78684e5b222645828ca302e56b40b9daff2b2d27
Author: Adam Langley <agl@google.com>
Date:   Tue Nov 22 09:24:27 2016 -0800

    Disable RSA-PSS by default.
    
    This change reverts 57e929f3c8c3d412639eb123382c79ff3bdc3ed3, although
    it was done by hand due to conflicts.
    
    BUG= chromium:667806 
    
    Change-Id: I17ddf2e5aa7d5129fe09cdeaf63c675091b445b0
    Reviewed-on: https://boringssl-review.googlesource.com/12420
    Reviewed-by: Adam Langley <agl@google.com>

Comment 3 by agl@chromium.org, Nov 22 2016

Components: Internals>Network>SSL

Comment 4 by gov...@chromium.org, Nov 22 2016

Labels: -Merge-Request-55 Merge-Approved-55
Approving merge to M55 branch 2883. Please merge ASAP. Thank you.
Project Member

Comment 5 by bugdroid1@chromium.org, Nov 22 2016 

The following revision refers to this bug:
  https://chrome-internal.googlesource.com/chrome/tools/buildspec/+/ce6afdc4eb770b14bd334114b552b90620dc1838

commit ce6afdc4eb770b14bd334114b552b90620dc1838
Author: Adam Langley <agl@google.com>
Date: Tue Nov 22 22:36:04 2016

Comment 6 by agl@chromium.org, Nov 22 2016

Labels: Merge-Merged
Status: Fixed (was: Assigned)

Comment 7 by awhalley@chromium.org, Nov 22 2016

Labels: -Merge-Merged -ReleaseBlock-Stable -Merge-Approved-55 merge-merged-2883
►

Sign in to add a comment