Actions
Bug #22567
closed
Tomcat server.xml templates require the sslEnabledProtocols parameter to
Difficulty:
trivial
Triaged:
Description
When leveraging custom Hiera to secure my Tomcat instance, I noticed that the sslProtocols value (set in the server.xml.erb file) only sets the maximum version of the SSL protocol offered. That is, if you set sslProtocols to TLSv1.2, it offers 1.0, 1.1 and 1.2 (but not 1.3).
To actually restrict the protocols used for a client connection, you need to also use the sslEnabledProtocols parameter (https://tomcat.apache.org/tomcat-7.0-doc/config/http.html)
Updated by Stephen Benjamin almost 7 years ago
- Project changed from Foreman to Katello
- Category changed from 47 to Installer
Updated by The Foreman Bot almost 7 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/puppet-candlepin/pull/97 added
Updated by Rich Jerrido almost 7 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset puppet-candlepin|7320f16d2acfab52d7da26e3b4bdee44501244a9.
Updated by Justin Sherrill almost 7 years ago
- Translation missing: en.field_release set to 338
Actions