Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667
Change-Id: I00cfa06030b84ae23cb8548b74cf5684562377aa
(cherry picked from commit 90247cf8cd0eac760d5b8eb986ceacf0db3fcc7f)
Reviewed: https:/ /review. openstack. org/146880 /git.openstack. org/cgit/ stackforge/ puppet- ceilometer/ commit/ ?id=bf082e49a2d ea17b1d9dd8c6c1 9de7f009f226cf
Committed: https:/
Submitter: Jenkins
Branch: stable/juno
commit bf082e49a2dea17 b1d9dd8c6c19de7 f009f226cf
Author: Lukas Bezdicka <email address hidden>
Date: Fri Jan 2 20:04:10 2015 +0100
Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667 e23cb8548b74cf5 684562377aa 60d5b8eb986ceac f0db3fcc7f)
Change-Id: I00cfa06030b84a
(cherry picked from commit 90247cf8cd0eac7