Hello,
better start new thread...
it looks like tls1.0 is not supported anymore in
ovirt-engine-extension-aaa-ldap
I just migrated engine from 4.3 to 4.4 and cannot use my ldap profile
because
server_error: The connection reader was unable to successfully complete
TLS negotiation: SSLHandshakeException(The server selected protocol
version TLS10 is not accepted by client preferences [TLS12]),
ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb
but when I try to force tls 1.0 by setting
...
pool.default.ssl.startTLS = true
pool.default.ssl.startTLSProtocol = TLSv1
...
I got
server_error: The connection reader was unable to successfully complete
TLS negotiation: SSLHandshakeException(No appropriate protocol (protocol
is disabled or cipher suites are inappropriate)), ldapSDKVersion=4.0.14,
revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb
I can't switch to something better on server side, is it possible to
allow weak ciphers/protocols on client side?
Thanks in advance,
Jiri
Attachments:
- smime.p7s
(application/pkcs7-signature — 3.6 KB)