From Dan Kenigsberg danken@redhat.com:
Dan Kenigsberg has posted comments on this change.
Change subject: ssl: enable tlsv1.2 support ......................................................................
Patch Set 31:
(1 comment)
https://gerrit.ovirt.org/#/c/72284/31/lib/vdsm/sslutils.py File lib/vdsm/sslutils.py:
Line 271: Line 272: def protocol_name_to_int(): Line 273: excludes = 0 Line 274: Line 275: for no_protocol in config.get('vars', 'ssl_protocol').split(','):
We want to use sslv23 which supports all of the enabled protocols. We can c
There is no NEED for it. But there might be a poor user which already have it set on his vdsm.conf. If you do not add special provisioning for him, he would not be able to start vdsm after upgrade. Line 276: if no_protocol != '': Line 277: excludes |= getattr(ssl, no_protocol.strip()) Line 278: