Foreman » Installer

Currently the SSL version used to talk to the CDN can be set via cdn_ssl_version. This exists for proxies that don't support modern standards like TLS 1.2. In an ideal world these proxies wouldn't exist.

It's used here:

https://github.com/Katello/katello/blob/5f7f32ebf1f4a221b6c370ea2a15b733e18527b8/app/lib/katello/resources/cdn.rb#L64-L69

The installer has a parameter for this:

https://github.com/theforeman/puppet-katello/blob/1de6fedb0b8ccbeab024d754b5c678840676f677/manifests/init.pp#L131

Since this is not critical to be set at installation time and can actually be a runtime setting, a database Setting would be a better place.