oVirt 4.2.4: Enable only strong ciphers/Disable TLS versions < 1.2
Hi, i decided to update my test environment (4.2.2) today and noticed oVirt 4.2.4 is out ;-) i have some dumb questions concerning - BZ 1582527 Enable only strong ciphers from engine to VDSM communication for hosts in cluster level >= 4.2 - BZ 1577593 Disable TLS versions < 1.2 for hosts with cluster level >= 4.1 Is simply updating a host from 4.2.2 to 4.2.4 enough to apply the changes mentioned above? Or do i have to reinstall hosts in addition to upgrading? Before or after the upgrade? My cluster was on cluster level 4.2 when i started. My hosts are type: Enterprise Linux (CentOS) thx matthias
On Tue, Jun 26, 2018 at 5:52 PM Matthias Leopold < matthias.leopold@meduniwien.ac.at> wrote:
Hi,
i decided to update my test environment (4.2.2) today and noticed oVirt 4.2.4 is out ;-)
i have some dumb questions concerning - BZ 1582527 Enable only strong ciphers from engine to VDSM communication for hosts in cluster level >= 4.2 - BZ 1577593 Disable TLS versions < 1.2 for hosts with cluster level >= 4.1
Is simply updating a host from 4.2.2 to 4.2.4 enough to apply the changes mentioned above?
Updating is enough, no reinstall is needed. Piotr, do we need any additional configuration on the host? Nir
Or do i have to reinstall hosts in addition to upgrading? Before or after the upgrade?
My cluster was on cluster level 4.2 when i started. My hosts are type: Enterprise Linux (CentOS)
thx matthias
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/REL7JFGVC3D263...
On Wed, Jun 27, 2018 at 8:13 PM, Nir Soffer <nsoffer@redhat.com> wrote:
On Tue, Jun 26, 2018 at 5:52 PM Matthias Leopold < matthias.leopold@meduniwien.ac.at> wrote:
Hi,
i decided to update my test environment (4.2.2) today and noticed oVirt 4.2.4 is out ;-)
i have some dumb questions concerning - BZ 1582527 Enable only strong ciphers from engine to VDSM communication for hosts in cluster level >= 4.2 - BZ 1577593 Disable TLS versions < 1.2 for hosts with cluster level >= 4.1
Is simply updating a host from 4.2.2 to 4.2.4 enough to apply the changes mentioned above?
Updating is enough, no reinstall is needed.
Piotr, do we need any additional configuration on the host?
In order to enable it please follow a doc text from [1] or [2] [1] https://bugzilla.redhat.com/1582527 [2] https://bugzilla.redhat.com/1577593
Nir
Or do i have to reinstall hosts in addition to upgrading? Before or after the upgrade?
My cluster was on cluster level 4.2 when i started. My hosts are type: Enterprise Linux (CentOS)
thx matthias
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community- guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/ message/REL7JFGVC3D263USMF73HK2GIFNFND5I/
participants (3)
-
Matthias Leopold -
Nir Soffer -
Piotr Kliczewski