Project

General

Profile

Actions
Copy link

Bug #13747

closed

webrick needs option to change SSL ciphers via configuration vs hard coded values

Added by Tomer Brisker about 8 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Tomer Brisker
Category:
Security
Target version:
1.12.0
Difficulty:
Triaged:
Bugzilla link:
1282514
Pull request:
https://github.com/theforeman/smart-proxy/pull/380
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1282514
Description of problem:

Currently the foreman-proxy piece has hard coded SSL ciphers in the following file:

/usr/share/foreman-proxy/lib/poodles-fix.rb

In order for users to pass certain security audits some Ciphers need to be disabled and currently they only approach is to modify the code, remove the offending cipher, and restart foreman-proxy. This workaround does not survive rpm updates and needs to be moved to a configuration file

Actions
Copy link

Also available in: Atom PDF