Change in ovirt-engine[master]: packaging: Add support for SSLv3
Juan Hernandez has submitted this change and it was merged.
Change subject: packaging: Add support for SSLv3
......................................................................
packaging: Add support for SSLv3
With the current configuration when we don't use Apache as a proxy we
only support TLSv1. This patch makes the set of supported protocols
configurable.
In order to change the configuration the user can change the
ENGINE_HTTPS_PROTOCOLS parameter in /etc/sysconfig/ovirt-engine. The
default is the following:
ENGINE_HTTPS_PROTOCOLS=SSLv3,TLSv1,TLSv1.1,TLSv1.2
Note that SSLv2 is not implemented in OpenJDK, so it can't be enabled.
Change-Id: If5f98ede332d717468bf4f55a03e38956fb8e875
Bug-Url: https://bugzilla.redhat.com/893979
Signed-off-by: Juan Hernandez <juan.hernandez(a)redhat.com>
---
M backend/manager/conf/engine.conf.defaults
M packaging/fedora/engine-service.xml.in
2 files changed, 13 insertions(+), 1 deletion(-)
Approvals:
Juan Hernandez: Verified; Looks good to me, approved
--
To view, visit http://gerrit.ovirt.org/10858
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: If5f98ede332d717468bf4f55a03e38956fb8e875
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernandez(a)redhat.com>
Gerrit-Reviewer: Alex Lourie <alourie(a)redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl(a)redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez(a)redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib(a)redhat.com>