Change in ovirt-engine[master]: packaging: setup: Change the SSL protocols supported by Apache

Code Review gerrit at ovirt.org
Wed Mar 1 09:27:29 UTC 2017


>From Sandro Bonazzola <sbonazzo at redhat.com>:

Sandro Bonazzola has submitted this change and it was merged.

Change subject: packaging: setup: Change the SSL protocols supported by Apache
......................................................................


packaging: setup: Change the SSL protocols supported by Apache

This patch removes the support for TLSv1, as well as makes sure the
older SSLv3 protocol is also disabled.

This leaves only the TLSv1.1 and TLSv1.2, which are currently
considered as safe.

Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37
Signed-off-by: Lev Veyde <lveyde at redhat.com>
Bug-Url: https://bugzilla.redhat.com/1388456
---
M packaging/setup/ovirt_engine_setup/engine_common/constants.py
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine-common/apache/ssl.py
2 files changed, 9 insertions(+), 0 deletions(-)

Approvals:
  Lev Veyde: Verified
  Sandro Bonazzola: Looks good to me, approved
  Martin Peřina: Looks good to me, but someone else must approve
  Jenkins CI: Passed CI tests
  Yedidyah Bar David: Looks good to me, but someone else must approve



-- 
To view, visit https://gerrit.ovirt.org/67831
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37
Gerrit-PatchSet: 7
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Lev Veyde <lveyde at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Lev Veyde <lveyde at redhat.com>
Gerrit-Reviewer: Martin Peřina <mperina at redhat.com>
Gerrit-Reviewer: Rafael Martins <rmartins at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Simone Tiraboschi <stirabos at redhat.com>
Gerrit-Reviewer: Yaniv Kaul <ykaul at redhat.com>
Gerrit-Reviewer: Yedidyah Bar David <didi at redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>


More information about the Engine-commits mailing list