Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support

Austin Blatt (Jira) Tue, 20 Jul 2021 13:43:09 -0700

Title: Message Title

Austin Blatt commented on

With the proper settings PuppetDB works with TLSv1.3

Configure out jetty.ini file

ssl-protocols = TLSv1.3

cipher-suites = TLS_AES_128_GCM_SHA256

and configure puppetserver's webserver.conf

webserver: {

    access-log-config: /etc/puppetlabs/puppetserver/request-logging.xml

    client-auth: want

    ssl-host: 0.0.0.0

    ssl-port: 8140

    ssl-protocols: [TLSv1.3]

    cipher-suites: [TLS_AES_128_GCM_SHA256]

So updating the defaults in trapperkeeper to include it in the ssl-protocols and adding a cipher suite that works with TLS 1.3 should be sufficient to allow TLSv1.3 by default.

Add Comment

This message was sent by Atlassian Jira

--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.406683.1626210956000.85798.1626813780172%40Atlassian.JIRA.

Jira (PDB-5191) [SPIKE] test puppetdb for TLSv1.3 support

Reply via email to