Re: [ClusterLabs] Saving secret locally

2020-01-22 Thread Ken Gaillot
On Wed, 2020-01-22 at 08:01 +0200, Strahil Nikolov wrote: > On January 21, 2020 9:23:35 PM GMT+02:00, Ken Gaillot < > kgail...@redhat.com> wrote: > > On Tue, 2020-01-21 at 06:29 +0200, Strahil Nikolov wrote: > > > On January 20, 2020 5:57:18 PM GMT+02:00, Ken Gaillot < > > > kgail...@redhat.com> wr

Re: [ClusterLabs] Corosync-Qdevice SSL Ciphers

2020-01-22 Thread Jan Friesse
Hi, Hi , In case the nss.config is not configured, what will be the ciphers used. nss.config (if exists) contains list of allowed ciphers. Otherwise it really depends on NSS version and what options were used during compilation. Regards, Honza With Regards Somanath Thilak J -Or

Re: [ClusterLabs] Corosync-Qdevice SSL Ciphers

2020-01-22 Thread Somanath Jeeva
Hi , In case the nss.config is not configured, what will be the ciphers used. With Regards Somanath Thilak J -Original Message- From: Jan Friesse Sent: Wednesday, January 22, 2020 13:45 To: Cluster Labs - All topics related to open-source clustering welcomed ; Somanath Jeeva Subjec

Re: [ClusterLabs] Corosync-Qdevice SSL Ciphers

2020-01-22 Thread Jan Friesse
Somanath, Hi , Is there a way to find/restrict the list of ciphers used by corosync-qnetd similar to the PCSD_SSL_CIPHERS variable in /etc/sysconfig/pcsd configuration file. Nope. But qnetd is using NSS so it is possible to change the system policy in /etc/crypto-policies/back-ends/nss.con