Project

General

Profile

Actions

Bug #37306

closed

Puppet server ciphers updated in 2.0 but old ciphers can remain in answers

Added by Ewoud Kohl van Wijngaarden 4 months ago. Updated 23 days ago.

Status:
Closed
Priority:
Normal
Category:
foreman-installer script
Target version:
-
Difficulty:
Triaged:
Yes
Fixed in Releases:

Description

In foreman-installer 2.0 we updated the ciphers for puppetserver, but didn't introduce a migration to update existing installations. Users from very old installs will still use the insecure ciphers. This breaks on FIPS and leaves other users more vulnerable than they need to be.

The commit in question was: https://github.com/theforeman/puppet-puppet/commit/8cc4e3094d5bbd6d05d794e087816934e1697a87

Actions #1

Updated by Ewoud Kohl van Wijngaarden 4 months ago

  • Description updated (diff)
Actions #2

Updated by The Foreman Bot 4 months ago

  • Status changed from New to Ready For Testing
  • Assignee set to Ewoud Kohl van Wijngaarden
  • Pull request https://github.com/theforeman/foreman-installer/pull/928 added
Actions #3

Updated by The Foreman Bot 4 months ago

  • Fixed in Releases 3.11.0 added
Actions #4

Updated by Ewoud Kohl van Wijngaarden 4 months ago

  • Status changed from Ready For Testing to Closed
Actions #5

Updated by Ewoud Kohl van Wijngaarden 23 days ago

  • Triaged changed from No to Yes
Actions

Also available in: Atom PDF