Project

General

Profile

Feature #29252

Stop accepting TLS 1.1 connections

Added by Ewoud Kohl van Wijngaarden 8 months ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Category:
Security
Target version:
Difficulty:
Triaged:
No
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

TLS 1.1 is not needed since all tools connecting to the Smart Proxy should support TLS 1.2. A general rule in security is to disable what's not needed.


Related issues

Related to foreman-tasks - Feature #29624: Stop accepting on TLS 1.1Closed

Associated revisions

Revision ebdde78c (diff)
Added by Ewoud Kohl van Wijngaarden 8 months ago

Fixes #29252 - Stop accepting TLS 1.1 connections

TLS 1.1 is not needed since all tools connecting to the Smart Proxy
should support TLS 1.2. A general rule in security is to disable what's
not needed.

History

#1 Updated by The Foreman Bot 8 months ago

  • Assignee set to Ewoud Kohl van Wijngaarden
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/smart-proxy/pull/752 added

#2 Updated by The Foreman Bot 8 months ago

  • Fixed in Releases 2.1.0 added

#3 Updated by Ewoud Kohl van Wijngaarden 8 months ago

  • Status changed from Ready For Testing to Closed

#4 Updated by Ewoud Kohl van Wijngaarden 8 months ago

  • Subject changed from Disable TLS 1.1 support in listening to Stop accepting TLS 1.1 connections

#5 Updated by Ewoud Kohl van Wijngaarden 6 months ago

Also available in: Atom PDF