Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57450

Remove TLS check from environment file whilst it is not reliable

    XMLWordPrintable

    Details

      Description

      In MDL-55404 we added checks for curl versions to detect situations where TLS 1.2 can't be used, which affects integrations with external services (as well as our own updates service).

      Unfortunately it has come to light that the version sniffing is just not reliable at all, operating system vendors backport security patches to older versions - so in many cases we reporting a problem which is not a problem. False positives and the solution to self-compile or something like php will be causing more harm than good.

      To solve this properly, we need to stop sniffing versions, and instead do a real test of TLS support - MDL-57262 is open about this.

      But in the meantime, to prevent these false positves causing problems for people upgrading, we will remove the check from 3.2 environment requirements.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                poltawski Dan Poltawski
                Reporter:
                poltawski Dan Poltawski
                Peer reviewer:
                Ankit Agarwal
                Integrator:
                David Monllaó
                Tester:
                Mark Nelson
                Participants:
                Component watchers:
                Matteo Scaramuccia, Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze, Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Sara Arjona (@sarjona), Víctor Déniz Falcón
              • Votes:
                1 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  9/Jan/17