Public bug reported:

  Ubuntu 24.04 OpenSSL package compiled with hardcoded
  DOPENSSL_TLS_SECURITY_LEVEL=2 causes SSL handshake failures with MongoDB 
  Atlas.

  Error: SSL routines:ssl3_read_bytes:tlsv1 alert internal error (alert
80)

  Impact: All MongoDB Atlas connections fail from Ubuntu 24.04 systems
  Affects: mongosh, Node.js applications, Python pymongo, etc.

  The hardcoded security level cannot be overridden at runtime, breaking 
  compatibility with legitimate cloud services.

  Workaround: Install older libssl1.1 package
  Suggested fix: Remove hardcoded security level or provide override 
  mechanism

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2115530

Title:
    Hardcoded OPENSSL_TLS_SECURITY_LEVEL=2 breaks MongoDB Atlas SSL
  connections

Status in openssl package in Ubuntu:
  New

Bug description:
    Ubuntu 24.04 OpenSSL package compiled with hardcoded
    DOPENSSL_TLS_SECURITY_LEVEL=2 causes SSL handshake failures with MongoDB 
    Atlas.

    Error: SSL routines:ssl3_read_bytes:tlsv1 alert internal error
  (alert 80)

    Impact: All MongoDB Atlas connections fail from Ubuntu 24.04 systems
    Affects: mongosh, Node.js applications, Python pymongo, etc.

    The hardcoded security level cannot be overridden at runtime, breaking 
    compatibility with legitimate cloud services.

    Workaround: Install older libssl1.1 package
    Suggested fix: Remove hardcoded security level or provide override 
    mechanism

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2115530/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to