]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
mgr/dashboard: Disable TLS 1.0 and 1.1 38332/head
authorVolker Theile <vtheile@suse.com>
Wed, 25 Nov 2020 16:57:13 +0000 (17:57 +0100)
committerVolker Theile <vtheile@suse.com>
Thu, 7 Jan 2021 08:50:23 +0000 (09:50 +0100)
commit8de58bf7b9381acded4bbbc4d6ab20a611ec66e1
tree9d16d32f73fb42d68997e2715757df80bc936f81
parent0aed223b682263a84591b7d535ae7966a0f9fa99
mgr/dashboard: Disable TLS 1.0 and 1.1

Disable these TLS versions because of security issues.

Fixes: https://tracker.ceph.com/issues/48360
Signed-off-by: Volker Theile <vtheile@suse.com>
(cherry picked from commit 5cf222b6d2a5cdc7ff23357b12878d34a4e68801)

Conflicts:
- src/pybind/mgr/dashboard/module.py
Limiting TLS version seems to work only with CherryPy >= 8.9.1 (Ubuntu 18.04 or SUSE Leap 15.1) based on tests in Teuthology. It failed on Ubuntu 16.04 (CherryPy 3.5.0) and RHEL 7.9 (CherryPy 3.2.2).
- qa/tasks/mgr/test_dashboard.py
Tests must be removed because they will not work in Teuthology because of outdated cherrypy versions on most platforms. Only Ubuntu 18.04 (and downstream SUSE Leap 15.1) will work, but it's not possible to limit QA runs to that specific platforms.
src/pybind/mgr/dashboard/module.py