Actions
Bug #27656
closed
Inconsistent "SSLVerifyDepth" value in configurations will cause Apache to request unnecessary SSL renegotiation
Difficulty:
Triaged:
No
Bugzilla link:
Description
Inconsistent "SSLVerifyDepth" value in the following 2 Apache configuration files (Foreman and Katello) can cause Apache to request unnecessary SSL secure renegotiation to the client (such as web browser). This will trigger security alert to an environment that running IPS, such as MacAfee IPS. Change the value of this directive to '3' in both file does prevent the renegotiation.
/etc/httpd/conf.d/05-foreman-ssl.conf
/etc/httpd/conf.d/05-foreman-ssl.d/katello.conf
Updated by The Foreman Bot about 5 years ago
- Status changed from New to Ready For Testing
- Assignee set to Ewoud Kohl van Wijngaarden
- Pull request https://github.com/theforeman/puppet-katello/pull/298 added
Updated by Ewoud Kohl van Wijngaarden about 5 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset puppet-katello|6ba99532dec262b8978970ee1394dc6d1acc3f2c.
Actions