Gluster users - Mar 2015 - SSL ciphers

> The problem with Gluster setting is that's impossible to go above
>
> HIGH:!SSLv2:!3DES:!RC4:!aNULL:!ADH
>
> Which is bad.. Gluster uses SSL only and not TLS :-( An upgrade should be
> considered.
That is untrue in current code:

    socket.c:2915
    priv->ssl_meth = (SSL_METHOD *)TLSv1_method();

Please put the version you're complaining about into a bug report.

On Thu, Mar 19, 2015 at 4:07 PM, Jeff Darcy <jdarcy at redhat.com> wrote:
> The problem with Gluster setting is that's impossible to go above
> >
> > HIGH:!SSLv2:!3DES:!RC4:!aNULL:!ADH
> >
> > Which is bad.. Gluster uses SSL only and not TLS :-( An upgrade should
be
> > considered.
>
> That is untrue in current code:
>
>     socket.c:2915
>     priv->ssl_meth = (SSL_METHOD *)TLSv1_method();
>
I'm really glad to hear that :-)


> Please put the version you're complaining about into a bug report.
>
Gluster 3.6.2 from here -
https://launchpad.net/~gluster/+archive/ubuntu/glusterfs-3.6?field.series_filter=trusty


-- 
Unix _IS_ user friendly, it's just selective about who its friends are.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.gluster.org/pipermail/gluster-users/attachments/20150319/27468edf/attachment.html>