Change in ovirt-engine[master]: packaging: Add support for SSLv3

[juan.hernandez at redhat.com]

Juan Hernandez has submitted this change and it was merged.

Change subject: packaging: Add support for SSLv3
......................................................................


packaging: Add support for SSLv3

With the current configuration when we don't use Apache as a proxy we
only support TLSv1. This patch makes the set of supported protocols
configurable.

In order to change the configuration the user can change the
ENGINE_HTTPS_PROTOCOLS parameter in /etc/sysconfig/ovirt-engine. The
default is the following:

  ENGINE_HTTPS_PROTOCOLS=SSLv3,TLSv1,TLSv1.1,TLSv1.2

Note that SSLv2 is not implemented in OpenJDK, so it can't be enabled.

Change-Id: If5f98ede332d717468bf4f55a03e38956fb8e875
Bug-Url: https://bugzilla.redhat.com/893979
Signed-off-by: Juan Hernandez <juan.hernandez at redhat.com>
---
M backend/manager/conf/engine.conf.defaults
M packaging/fedora/engine-service.xml.in
2 files changed, 13 insertions(+), 1 deletion(-)

Approvals:
  Juan Hernandez: Verified; Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/10858
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: If5f98ede332d717468bf4f55a03e38956fb8e875
Gerrit-PatchSet: 3
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Alex Lourie <alourie at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib at redhat.com>