<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font size="-1"><font face="DejaVu Sans">Dear users, <br>
<br>
We have found a communication problem between some versions of
rudder agent and server due to a bug in OpenSSL library. <br>
<br>
The problem occurs when a client (resp. server) using OpenSSL
1.0 try to communicate with a server (resp. client) using
OpenSSL 1.1.0.<br>
</font></font>It is <font size="-1"><font face="DejaVu Sans"><font
size="-1"><font face="DejaVu Sans">corrected in newly released
OpenSSL 1.1.1
(<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/issues/7134">https://github.com/openssl/openssl/issues/7134</a>). The Rudder
corresponding bug is </font></font>traced on Rudder bug
tracker (<a class="moz-txt-link-freetext" href="https://www.rudder-project.org/redmine/issues/13690">https://www.rudder-project.org/redmine/issues/13690</a>). <br>
<br>
Rudder versions from 5.0.0 to 5.0.2 on Ubuntu 18.04, Debian 9,
and SLES 15 use OpenSSL 1.1.0. <br>
Any previous version of Rudder on these OS or any version of
Rudder in any other OS use OpenSSL 1.0. <br>
If you have in your environment a Rudder server in one group and
agents in the other group, these agents won't be able to
communicate with the server any more. <br>
</font></font><font size="-1"><font face="DejaVu Sans"><font
size="-1"><font face="DejaVu Sans"><br>
The most likely case where it could happen is if you upgrade
a Rudder server on Ubuntu 18.04 or on Debian 9 from version
4.3 to 5.0. In such a case, a partial workaround is to also
upgrade Debian 9/Ubuntu 18.04 agents to Rudder 5.0, but
agents in other OS will still be impacted by the
communication problem.<br>
A safer and simpler solution, if available, is to delay such
on upgrade until a patch is available. <br>
<br>
</font></font>We are working on the patch to replace the buggy
OpenSSL 1.1.0 and we will release a new version of Rudder 5.0
with it as soon as possible. <br>
<br>
We are sorry for any inconvenience resulting from this problem.
If you need more information or help, please don't hesitate to
contact us by email or other means of communication like gitter
(<a class="moz-txt-link-freetext" href="https://gitter.im/normation/rudder">https://gitter.im/normation/rudder</a>) or irc (#rudder on
freenode). <br>
<br>
Regards, <br>
<br>
</font></font>
<div class="moz-signature">-- <br>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<style type="text/css"><!--
a.redlink:link { color: #1782E6; text-decoration: none; }
a.redlink:visited { color: #1782E6; text-decoration: none; }
.sig { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: small; }
.sigsmall { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: x-small; }
--</style><br>
<br>
<table width="380" cellspacing="2" cellpadding="0" border="0">
<tbody>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><b><img alt=""
src="cid:part1.56FBFA23.597D6180@normation.com"
width="50" hspace="10" height="50" align="left"> <span
class="sig">François ARMAND</span></b><br>
<span class="sig"><i>Co-founder & CTO</i></span><br>
<span class="sig"><a class="redlink"
href="http://www.normation.com">Normation</a></span> </td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><span class="sigsmall"><b>87 rue de Turbigo,
75003 Paris, France</b></span></td>
</tr>
<tr>
<td><span class="sigsmall">Telephone:</span></td>
<td><span class="sigsmall">+33 (0)1 83 62 99 23</span></td>
</tr>
<tr>
<td><span class="sigsmall">Mobile:</span></td>
<td><span class="sigsmall">+33 (0)6 63 37 60 55</span></td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
</tbody>
</table>
</div>
</body>
</html>