Change in ovirt-engine[ovirt-engine-4.1.1.z]: packaging: setup: Change the SSL protocols supported by Apache

[Code Review]

>From Tal Nisan <tnisan at redhat.com>:

Tal Nisan has submitted this change and it was merged.

Change subject: packaging: setup: Change the SSL protocols supported by Apache
......................................................................


packaging: setup: Change the SSL protocols supported by Apache

This patch removes the support for TLSv1, as well as makes sure the
older SSLv3 protocol is also disabled.

This leaves only the TLSv1.1 and TLSv1.2, which are currently
considered as safe.

Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37
Signed-off-by: Lev Veyde <lveyde at redhat.com>
Bug-Url: https://bugzilla.redhat.com/1388456
(cherry picked from commit 7f43bdf526cdfdc0bfcbe227b434f8275b6b47be)
---
M packaging/setup/ovirt_engine_setup/engine_common/constants.py
M packaging/setup/plugins/ovirt-engine-setup/ovirt-engine-common/apache/ssl.py
2 files changed, 9 insertions(+), 0 deletions(-)

Approvals:
  Lev Veyde: Verified
  Sandro Bonazzola: Looks good to me, approved
  Jenkins CI: Passed CI tests



-- 
To view, visit https://gerrit.ovirt.org/73360
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Icf8d0cc990ea6c2051f6275435fc9fe309e0fa37
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-4.1.1.z
Gerrit-Owner: Lev Veyde <lveyde at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Lev Veyde <lveyde at redhat.com>
Gerrit-Reviewer: Sandro Bonazzola <sbonazzo at redhat.com>
Gerrit-Reviewer: Tal Nisan <tnisan at redhat.com>