On 12/02/2014 06:03 AM, Sten Aus wrote:
It's hardcoded but works perfectly (I guess until next upgrade, but anyway).
A way how to disable sslv3 and support tls1.2 and 1.1 is that:
Edit file /usr/bin/pveproxy
Find "method => "tlsv1", comment it out.
Now "ssleay" supports all tls versions and ssl versions.
It's relatively easy to disable sslv3 by adding a line
"sslv3 => 0,"
Many thanks for this, Sten.
Sten++
-PG
_______________________________________________
pve-user mailing list
[email protected]
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user