Oved Ourfali has uploaded a new change for review. Change subject: core: override SSL protocol to TLSv1 ......................................................................
core: override SSL protocol to TLSv1 Some newer JDK versions disabled the use of SSLv3, so we need to make sure to set the protocol to TLSv1 Change-Id: I7ebf1021231d888451a14201639f623aa1384d82 Bug-Url: https://bugzilla.redhat.com/1185430 Signed-off-by: Oved Ourfali <[email protected]> --- M packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql 1 file changed, 5 insertions(+), 0 deletions(-) git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/46/37246/1 diff --git a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql index 7f1706e..025d477 100644 --- a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql +++ b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql @@ -1018,6 +1018,11 @@ select fn_db_update_default_config_value('vdsConnectionTimeout', '180', '2', 'general', false); select fn_db_update_default_config_value('vdsRetries', '3', '0', 'general', false); +-- Override existing configuration to TLSv1 if it is SSLv3 +select fn_db_update_default_config_value('VdsmSSLProtocol','SSLv3','TLSv1','general', false); +select fn_db_update_default_config_value('ExternalCommunicationProtocol','SSLv3','TLSv1','general', false); + + ------------------------------------------------------------------------------------ -- Cleanup deprecated configuration values section ------------------------------------------------------------------------------------ -- To view, visit http://gerrit.ovirt.org/37246 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I7ebf1021231d888451a14201639f623aa1384d82 Gerrit-PatchSet: 1 Gerrit-Project: ovirt-engine Gerrit-Branch: ovirt-engine-3.5 Gerrit-Owner: Oved Ourfali <[email protected]> _______________________________________________ Engine-patches mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/engine-patches
