Repository navigation
Provide mechanism to disable TLS versions/algorithms for CloudStack server services #3155
Description
In CloudStack secure socket-based services exists for agent server (port 8250) and jetty (8443/https). With recent limitation logged in #3140 a global fix is acceptable as a workaround however CloudStack needs to provide the mechanism (viz global settings or a commandline flag via the /etc/default/cloudstack-management) to disable TLS versions such as TLS v1.0, v1.1 etc.
ISSUE TYPE
- Improvement Request
COMPONENT NAME
Management Server
CLOUDSTACK VERSION
4.11, 4.12
Activity
yadvr commentedon Feb 1, 2019
Closing this, it seems due to configuration issue the ciphers file is ignored. A better fix should be on the way soon. #3140