Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57450

Remove TLS check from environment file whilst it is not reliable

    XMLWordPrintable

    Details

      Description

      In MDL-55404 we added checks for curl versions to detect situations where TLS 1.2 can't be used, which affects integrations with external services (as well as our own updates service).

      Unfortunately it has come to light that the version sniffing is just not reliable at all, operating system vendors backport security patches to older versions - so in many cases we reporting a problem which is not a problem. False positives and the solution to self-compile or something like php will be causing more harm than good.

      To solve this properly, we need to stop sniffing versions, and instead do a real test of TLS support - MDL-57262 is open about this.

      But in the meantime, to prevent these false positves causing problems for people upgrading, we will remove the check from 3.2 environment requirements.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              poltawski Dan Poltawski
              Reporter:
              poltawski Dan Poltawski
              Peer reviewer:
              Ankit Agarwal
              Integrator:
              David Monllaó
              Tester:
              Mark Nelson
              Participants:
              Component watchers:
              Matteo Scaramuccia, Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze, Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Sara Arjona (@sarjona), Víctor Déniz Falcón
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                9/Jan/17