From: Thomas Lamprecht <t.lamprecht@proxmox.com>
To: "Proxmox VE development discussion" <pve-devel@lists.proxmox.com>,
"Fabian Grünbichler" <f.gruenbichler@proxmox.com>
Subject: [pve-devel] applied: [PATCH http-server v2] fix #4859: properly configure TLSv1.3 only mode
Date: Thu, 20 Jul 2023 17:20:58 +0200 [thread overview]
Message-ID: <e7d17f26-b5e2-32b1-7b7a-1a118643160c@proxmox.com> (raw)
In-Reply-To: <20230719091555.3516251-1-f.gruenbichler@proxmox.com>
On 19/07/2023 11:15, Fabian Grünbichler wrote:
> set_min/max_proto_version is recommended upstream nowadays, and it seems to be
> required for some reason if *only* TLS v1.3 is supposed to be enabled.
>
> querying via get_options gives us the union of
> - system-wide openssl defaults
> - our internal SSL defaults
> - flags configured by the user via /etc/default/pveproxy
>
> note that by default only 1.2 and 1.3 are enabled in the first place, so
> disabling either leaves a single version being set as min and max.
>
> Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
> ---
> use `&Net::..` instead of `Net::..` for the constants, else spiceproxy chokes
> on the usage. either variant seems to work for pveproxy.. ?
>
> src/PVE/APIServer/AnyEvent.pm | 17 +++++++++++++++++
> 1 file changed, 17 insertions(+)
>
>
applied, thanks!
prev parent reply other threads:[~2023-07-20 15:21 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-07-19 9:15 [pve-devel] " Fabian Grünbichler
2023-07-20 15:20 ` Thomas Lamprecht [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=e7d17f26-b5e2-32b1-7b7a-1a118643160c@proxmox.com \
--to=t.lamprecht@proxmox.com \
--cc=f.gruenbichler@proxmox.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.