Oved Ourfali has uploaded a new change for review.

Change subject: core: override SSL protocol to TLSv1
......................................................................

core: override SSL protocol to TLSv1

Some newer JDK versions disabled the use of SSLv3, so we need to make
sure to set the protocol to TLSv1

Change-Id: I7ebf1021231d888451a14201639f623aa1384d82
Bug-Url: https://bugzilla.redhat.com/1185430
Signed-off-by: Oved Ourfali <[email protected]>
---
M packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql
1 file changed, 3 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/45/37245/1

diff --git a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql 
b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql
index 9a4c21e..72c0e8a 100644
--- a/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql
+++ b/packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql
@@ -818,6 +818,9 @@
 select fn_db_update_config_value('CustomDeviceProperties', 
'{type=interface;prop={SecurityGroups=^(?:(?:[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12},
 *)*[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}|)$}}', '3.4');
 select fn_db_update_config_value('CustomDeviceProperties', 
'{type=interface;prop={SecurityGroups=^(?:(?:[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12},
 *)*[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}|)$}}', '3.5');
 
+-- Override existing configuration to TLSv1
+select fn_db_add_update_value('VdsmSSLProtocol','TLSv1','general');
+select 
fn_db_add_update_value('ExternalCommunicationProtocol','TLSv1','general');
 
 
------------------------------------------------------------------------------------
 --   Update only if default not changed section


-- 
To view, visit http://gerrit.ovirt.org/37245
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7ebf1021231d888451a14201639f623aa1384d82
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Oved Ourfali <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to