From Dan Kenigsberg danken@redhat.com:
Dan Kenigsberg has posted comments on this change.
Change subject: ssl: enable tlsv1.2 support ......................................................................
Patch Set 31:
(1 comment)
https://gerrit.ovirt.org/#/c/72284/31/lib/vdsm/sslutils.py File lib/vdsm/sslutils.py:
Line 271: Line 272: def protocol_name_to_int(): Line 273: excludes = 0 Line 274: Line 275: for no_protocol in config.get('vars', 'ssl_protocol').split(','):
OK, so for this specific case we can add additional excludes and keep proto
I don't understand your question.
I would be content you you have
if no_protocol == 'sslv23': exclude = 0 elif no_protocl == 'tlsv1.1': exclude = OP_NO_TLSv1
or something like that, for any value that we formerly supported in the config file. Line 276: if no_protocol != '': Line 277: excludes |= getattr(ssl, no_protocol.strip()) Line 278:
vdsm-patches@lists.fedorahosted.org