Project

General

Profile

Refactor #28476

Make cdn_ssl_version a Setting

Added by Ewoud Kohl van Wijngaarden 4 months ago. Updated 2 months ago.

Status:
Ready For Testing
Priority:
Normal
Assignee:
Category:
Settings
Target version:
Branch:
Difficulty:
easy
Triaged:
Yes
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

Currently the SSL version used to talk to the CDN can be set via cdn_ssl_version. This exists for proxies that don't support modern standards like TLS 1.2. In an ideal world these proxies wouldn't exist.

It's used here:

https://github.com/Katello/katello/blob/5f7f32ebf1f4a221b6c370ea2a15b733e18527b8/app/lib/katello/resources/cdn.rb#L64-L69

The installer has a parameter for this:

https://github.com/theforeman/puppet-katello/blob/1de6fedb0b8ccbeab024d754b5c678840676f677/manifests/init.pp#L131

Since this is not critical to be set at installation time and can actually be a runtime setting, a database Setting would be a better place.


Related issues

Copied to Installer - Refactor #28906: Make cdn_ssl_version a SettingReady For Testing

History

#1 Updated by James Jeffers 4 months ago

  • Triaged changed from No to Yes
  • Difficulty set to easy
  • Target version set to Katello 3.15.0

#2 Updated by Chris Roberts 3 months ago

  • Assignee set to Chris Roberts

#3 Updated by The Foreman Bot 2 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/Katello/katello/pull/8552 added

#4 Updated by Chris Roberts 2 months ago

Also available in: Atom PDF