Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CI: Avoid newer openssl version due to WMTS tests #1977

Merged
merged 1 commit into from
Dec 24, 2021

Conversation

greglucas
Copy link
Contributor

The negotiation with a tile provider needed more up-to-date TLS/SSL protocols, so for now we just pin to a lower openssl
on the runners.

I am able to reproduce locally if I install openssl 3.0.0. I think this is a server-side issue on NASA's end, so we will have to wait for them to update to more secure protocols before unpinning.

Rationale

Implications

The negotiation with a tile provider needed more up-to-date
TLS/SSL protocols, so for now we just pin to a lower openssl
on the runners.
Copy link
Member

@QuLogic QuLogic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems good for now.

@QuLogic QuLogic added this to the 0.20.2 milestone Dec 24, 2021
@QuLogic QuLogic merged commit 287acb0 into SciTools:master Dec 24, 2021
@greglucas greglucas deleted the openssl branch December 27, 2021 16:24
@greglucas
Copy link
Contributor Author

I reached out to NASA and they responded saying it would be in early 2022 (Jan/Feb time frame). So, we'll have to wait a month or two before unpinning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants