Maniphest T238838

Disabling old AWB versions
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Nov 21 2019, 4:24 PM

Tags

Referenced Files

None

Subscribers

Description

Due to T238038, the browser support going away and then Wikimedia tightening up... we should just disable old AWB versions as they don’t support newer TLS

To quote the original task:

TLS 1.2 was published ten years ago to address weaknesses in TLS 1.0 and 1.1 and has enjoyed wide adoption since then. These old versions of TLS rely on MD5 and SHA-1, both now broken, and contain other flaws. TLS 1.0 is no longer PCI-DSS compliant and the TLS working group has adopted a document to deprecate TLS 1.0 and TLS 1.1.

TLS 1.1 and 1.0 support is being removed from the major browsers on early 2020 as announced:

Details

	Subject	Repo	Branch	Lines +/-
	logging: pluralize $wmgDefaultMonologHandler	operations/mediawiki-config	master	+10 -10

Customize query in gerrit

Related Objects

Mentioned Here: T238038: Start warning and deprecation process for all legacy TLS

Event Timeline

Reedy created this task.Nov 21 2019, 4:24 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 21 2019, 4:24 PM

Reedy updated the task description. (Show Details)Nov 21 2019, 4:26 PM

Reedy updated the task description. (Show Details)

Done. Only 6.1.0.1 enabled as "stable" now

Change #1019267 had a related patch set uploaded (by Hashar; author: Hashar):

[operations/mediawiki-config@master] logging: pluralize $wmgDefaultMonologHandler

https://gerrit.wikimedia.org/r/1019267

gerritbot added a project: Patch-For-Review.Fri, Apr 12, 11:37 AM