Public bug reported:

  Ubuntu 24.04 OpenSSL package compiled with hardcoded
  DOPENSSL_TLS_SECURITY_LEVEL=2 causes SSL handshake failures with MongoDB 
  Atlas.

  Error: SSL routines:ssl3_read_bytes:tlsv1 alert internal error (alert
80)

  Impact: All MongoDB Atlas connections fail from Ubuntu 24.04 systems
  Affects: mongosh, Node.js applications, Python pymongo, etc.

  The hardcoded security level cannot be overridden at runtime, breaking 
  compatibility with legitimate cloud services.

  Workaround: Install older libssl1.1 package
  Suggested fix: Remove hardcoded security level or provide override 
  mechanism

** Affects: openssl (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2115530

Title:
    Hardcoded OPENSSL_TLS_SECURITY_LEVEL=2 breaks MongoDB Atlas SSL
  connections

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2115530/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to