Dropping local crypto settings throughout oVirt in favour of crypto policies

Hi, given that crypto policies appeared in RHEL8 I think it's a good time to discuss using them throughout oVirt. I prepared a document, that describes the current state of crypto settings in VDSM along with the benefits and potential issues that come with moving to crypto policies. If you have a moment, please go through the doc - any input and comments are welcome. https://docs.google.com/document/d/1K19jDOITEQenPDbbSft2ChgGrL_DgpcbQon_bWLL... Regards, Marcin Sobczyk

Il giorno mar 27 ago 2019 alle ore 14:47 Marcin Sobczyk <msobczyk@redhat.com> ha scritto:
Hi,
given that crypto policies appeared in RHEL8 I think it's a good time to discuss using them throughout oVirt. I prepared a document, that describes the current state of crypto settings in VDSM along with the benefits and potential issues that come with moving to crypto policies. If you have a moment, please go through the doc - any input and comments are welcome.
https://docs.google.com/document/d/1K19jDOITEQenPDbbSft2ChgGrL_DgpcbQon_bWLL...
Regards, Marcin Sobczyk
Adding +Ryan Barry <rbarry@redhat.com> and +Yuval Turgeman <yturgema@redhat.com> to the loop to be sure they see this. -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo@redhat.com <https://www.redhat.com/>*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

Patches that drop VDSM's crypto settings have been posted: https://gerrit.ovirt.org/#/q/status:open+project:vdsm+branch:master+topic:cr... It is desirable to have them merged before the beta, so I'm kindly asking for reviews. Regards, Marcin On 8/27/19 3:11 PM, Sandro Bonazzola wrote:
Il giorno mar 27 ago 2019 alle ore 14:47 Marcin Sobczyk <msobczyk@redhat.com <mailto:msobczyk@redhat.com>> ha scritto:
Hi,
given that crypto policies appeared in RHEL8 I think it's a good time to discuss using them throughout oVirt. I prepared a document, that describes the current state of crypto settings in VDSM along with the benefits and potential issues that come with moving to crypto policies. If you have a moment, please go through the doc - any input and comments are welcome.
https://docs.google.com/document/d/1K19jDOITEQenPDbbSft2ChgGrL_DgpcbQon_bWLL...
Regards, Marcin Sobczyk
Adding +Ryan Barry <mailto:rbarry@redhat.com> and +Yuval Turgeman <mailto:yturgema@redhat.com> to the loop to be sure they see this.
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo@redhat.com <mailto:sbonazzo@redhat.com>
*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*
participants (2)
-
Marcin Sobczyk
-
Sandro Bonazzola