Skip to content
Snippets Groups Projects
Commit e30e8d271950 authored by Stan Hu's avatar Stan Hu
Browse files

Downgrade OpenSSL version to 1.1.1

This reverts the changes in
https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7797
because this breaks LDAP and other client integrations that don't
support TLS 1.2:
https://github.com/openssl/openssl/issues/13299#issuecomment-722124937

TLS 1.0 and 1.1 are supported by OpenSSL 3 if
`SSLContext#security_level=` is set to 0, but as far as I can tell
there's no simple way to ensure that this is enabled by default right
now. So until we do this properly or have a proper deprecation process
for TLS 1.1 and 1.0, we probably need to stay on OpenSSL 1.1.1.
parent b949d255fc09
No related branches found
No related tags found
1 merge request!155Merge upstream Omnibus GitLab into Omnibus Heptapod
......@@ -40,4 +40,4 @@
NIGHTLY_FIPS_REPO: 'nightly-fips-builds'
QA_TESTS_UPSTREAM_PROJECT: 'gitlab-org/gitlab'
QA_TESTS_REF: 'master'
OPENSSL_VERSION: '3.2.1'
OPENSSL_VERSION: '1.1.1'
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment