[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-08 Thread Launchpad Bug Tracker
This bug was fixed in the package nginx - 1.15.5-0ubuntu3 --- nginx (1.15.5-0ubuntu3) disco; urgency=medium * No-change rebuild for the perl 5.28 transition. -- Adam Conrad Fri, 02 Nov 2018 19:02:18 -0600 ** Changed in: nginx (Ubuntu Disco) Status: Fix Committed => Fix R

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-07 Thread Thomas Ward
Released by the security team while handing USN-3812-1 and three CVEs into Cosmic. Marking "Fix Released" for Cosmic as this is now in the repositories. ** Changed in: nginx (Ubuntu Cosmic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a memb

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-06 Thread Thomas Ward
Additional testing was completed by myself and I haven't seen any TLS related regressions (running this on two production sites currently for my business and my personal). I'm marking this as verification-done. ** Tags removed: verification-needed verification-needed-cosmic ** Tags added: verific

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-06 Thread Thomas Ward
Looks like Adam Conrad included the SRU within Disco's no change rebuild for perl, marking as Fix Committed for Disco as that hasn't landed out of proposed yet. ** Also affects: nginx (Ubuntu Disco) Importance: Wishlist Status: In Progress ** Changed in: nginx (Ubuntu Disco) Stat

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-06 Thread Andreas Hasenack
This is in disco already, right: nginx (1.15.5-0ubuntu3) disco; urgency=medium * No-change rebuild for the perl 5.28 transition. -- Adam Conrad Fri, 02 Nov 2018 19:02:18 -0600 nginx (1.15.5-0ubuntu2) cosmic; urgency=medium * d/conf/nginx.conf: Enable TLSv1.3 by default by adding TLSv1.3

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-05 Thread Thomas Ward
Confirmed in testing with a Cosmic container that this enables TLS 1.3 as well as 1.2, 1.1, and 1.0 in the default configuration change. TESTERS: (0) Start with the NGINX in main, not in proposed, for this test. (`sudo apt install nginx-core nginx`) (1) In /etc/nginx/sites-available/default, unc

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-03 Thread Mathew Hodson
** Changed in: nginx (Ubuntu Cosmic) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1800214 Title: Enable TLS 1.3 by default in NGINX configs for Cosmic To manag

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-11-02 Thread Steve Langasek
Hello Thomas, or anyone else affected, Accepted nginx into cosmic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nginx/1.15.5-0ubuntu2 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki

[Bug 1800214] Re: Enable TLS 1.3 by default in NGINX configs for Cosmic

2018-10-26 Thread Thomas Ward
** Changed in: nginx (Ubuntu) Status: New => Incomplete ** Changed in: nginx (Ubuntu) Status: Incomplete => In Progress ** Description changed: [Reason for SRU] Ubuntu Cosmic 18.10 ships with OpenSSL 1.1.1, which has TLS 1.3 support. It was intended to enable TLS 1.3 in th