Debian buster : EE certificate key too weak

0

Hello,
I tested yesterday the Debian Buster 10 with a connection to DocumentDB with pymongo (python3).

I got an error with openssl that failled any connection to DocumentDB :

pymongo.errors.ServerSelectionTimeoutError: docdb-XXXXXXXX.eu-west-1.docdb.amazonaws.com:27017: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:1076)

openssl version 1.1.1

Do you know if the certificate will be updated or if it requires to configure openssl to not get this exception?

Regards

posta 5 anni fa1231 visualizzazioni
1 Risposta
0

We are in the process of upgrading our root certificate. In the meantime, depending on your requirements, an additional option is to modify (/etc/ssl/openssl.cnf) from “CipherString = DEFAULT@SECLEVEL=2” to “CipherString = DEFAULT@SECLEVEL=1”

AWS
con risposta 5 anni fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande