Tal Nisan has submitted this change and it was merged. Change subject: packaging: setup: Change the SSL protocols supported by Apache ...................................................................... packaging: setup: Change the SSL protocols supported by Apache This patch removes the support for TLSv1, as well as makes sure the older SSLv3 protocol is also disabled. This leaves only the TLSv1.1 and TLSv1.2, which are currently considered as safe. Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37 Signed-off-by: Lev Veyde <lveyde(a)redhat.com&gt; Bug-Url: https://bugzilla.redhat.com/1388456 (cherry picked from commit 7f43bdf526cdfdc0bfcbe227b434f8275b6b47be) --- M packaging/setup/ovirt_engine_setup/engine_common/constants.py M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine-common/apache/ssl.py 2 files changed, 9 insertions(+), 0 deletions(-) Approvals: Lev Veyde: Verified Sandro Bonazzola: Looks good to me, approved Jenkins CI: Passed CI tests -- To view, visit https://gerrit.ovirt.org/73360 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37 Gerrit-PatchSet: 2 Gerrit-Project: ovirt-engine Gerrit-Branch: ovirt-engine-4.1.1.z Gerrit-Owner: Lev Veyde <lveyde(a)redhat.com&gt; Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Lev Veyde <lveyde(a)redhat.com&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt; Gerrit-Reviewer: Tal Nisan <tnisan(a)redhat.com&gt;