[2.17.0-0ubuntu1] Many SSL warnings in the ovsdb log
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openvswitch (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
There are many repeating warning messages like this in the ovsdb log:
2022-06-
2022-06-
2022-06-
2022-06-
2022-06-
2022-06-
While they seem harmless, we may need to do something about this as it gives false leads to people trying to debug real issues (e.g. with networking) in their environments.
Some references as to why this might be happening:
https:/
"SSL_OP_
Some TLS implementations do not send the mandatory close_notify alert on shutdown. If the application tries to wait for the close_notify alert but the peer closes the connection without sending it, an error is generated. When this option is enabled the peer does not need to send the close_notify alert and a closed connection will be treated as if the close_notify alert was received.
You should only enable this option if the protocol running over TLS can detect a truncation attack itself, and that the application is checking for that truncation attack."
https:/
$ apt policy openvswitch-common
openvswitch-common:
Installed: 2.17.0-0ubuntu1
Candidate: 2.17.0-0ubuntu1
Version table:
*** 2.17.0-0ubuntu1 500
500 http://
100 /var/lib/
root 5823 1 0 13:19 ? 00:00:01 ovsdb-server -vconsole:off -vfile:info --log-file=
Status changed to 'Confirmed' because the bug affects multiple users.