Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title Rob Browning updated an issue PuppetDB / PDB-5191 [SPIKE] test puppetdb for TLSv1.3 support Change By: Rob Browning Fix Version/s: PDB n/a Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.406683.1626210956000.93198.1627493580052%40Atlassian.JIRA.
Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title Austin Blatt commented on PDB-5191 Re: [SPIKE] test puppetdb for TLSv1.3 support The module contains no defaults for those settings, so there's nothing to update there. Both settings are configurable via the module so someone could configure it to use TLSv1.3 now. Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.406683.1626210956000.85802.1626814320024%40Atlassian.JIRA.
Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title
Austin Blatt commented on PDB-5191
Re: [SPIKE] test puppetdb for TLSv1.3 support
With the proper settings PuppetDB works with TLSv1.3 Configure out jetty.ini file
ssl-protocols = TLSv1.3
cipher-suites = TLS_AES_128_GCM_SHA256
and configure puppetserver's webserver.conf
webserver: {
access-log-config: /etc/puppetlabs/puppetserver/request-logging.xml
client-auth: want
ssl-host: 0.0.0.0
ssl-port: 8140
ssl-protocols: [TLSv1.3]
cipher-suites: [TLS_AES_128_GCM_SHA256]
}
So updating the defaults in trapperkeeper to include it in the ssl-protocols and adding a cipher suite that works with TLS 1.3 should be sufficient to allow TLSv1.3 by default.
Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title Austin Blatt assigned an issue to Austin Blatt PuppetDB / PDB-5191 [SPIKE] test puppetdb for TLSv1.3 support Change By: Austin Blatt Assignee: Austin Blatt Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.406683.1626210956000.83602.1626460680149%40Atlassian.JIRA.
Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title Austin Blatt updated an issue PuppetDB / PDB-5191 [SPIKE] test puppetdb for TLSv1.3 support Change By: Austin Blatt Sprint: HAHA/Grooming HA 2021-07-28 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.406683.1626210956000.81731.1626294780029%40Atlassian.JIRA.
Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support
Title: Message Title Austin Blatt updated an issue PuppetDB / PDB-5191 [SPIKE] test puppetdb for TLSv1.3 support Change By: Austin Blatt Acceptance Criteria: - document any failures, if any- create tickets for module(s) work Release Notes: Not Needed Story Points: 2 Summary: [SPIKE] test puppetdb for TLSv1.3 support Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To
