From Sandro Bonazzola <sbonazzo@redhat.com>:

Sandro Bonazzola has submitted this change and it was merged. Change subject: packaging: setup: Change the SSL protocols supported by Apache ...................................................................... packaging: setup: Change the SSL protocols supported by Apache This patch removes the support for TLSv1, as well as makes sure the older SSLv3 protocol is also disabled. This leaves only the TLSv1.1 and TLSv1.2, which are currently considered as safe. Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37 Signed-off-by: Lev Veyde <lveyde@redhat.com> Bug-Url: https://bugzilla.redhat.com/1388456 --- M packaging/setup/ovirt_engine_setup/engine_common/constants.py M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine-common/apache/ssl.py 2 files changed, 9 insertions(+), 0 deletions(-) Approvals: Lev Veyde: Verified Sandro Bonazzola: Looks good to me, approved Martin Peřina: Looks good to me, but someone else must approve Jenkins CI: Passed CI tests Yedidyah Bar David: Looks good to me, but someone else must approve -- To view, visit https://gerrit.ovirt.org/67831 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37 Gerrit-PatchSet: 7 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Lev Veyde <lveyde@redhat.com> Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Lev Veyde <lveyde@redhat.com> Gerrit-Reviewer: Martin Peřina <mperina@redhat.com> Gerrit-Reviewer: Rafael Martins <rmartins@redhat.com> Gerrit-Reviewer: Sandro Bonazzola <sbonazzo@redhat.com> Gerrit-Reviewer: Simone Tiraboschi <stirabos@redhat.com> Gerrit-Reviewer: Yaniv Kaul <ykaul@redhat.com> Gerrit-Reviewer: Yedidyah Bar David <didi@redhat.com> Gerrit-Reviewer: gerrit-hooks <automation@ovirt.org>