Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667
Change-Id: I852cf4d68de6d6b40056b9928971e63fc1b76a3b
(cherry picked from commit 370f2aa24256dc54f363216ddc3009c199595d14)
Reviewed: https:/ /review. openstack. org/146883 /git.openstack. org/cgit/ stackforge/ puppet- keystone/ commit/ ?id=f81e43043e4 873504ba78db5d9 ee128f3c834b0e
Committed: https:/
Submitter: Jenkins
Branch: stable/juno
commit f81e43043e48735 04ba78db5d9ee12 8f3c834b0e
Author: Lukas Bezdicka <email address hidden>
Date: Fri Jan 2 20:48:44 2015 +0100
Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667 b40056b9928971e 63fc1b76a3b 4f363216ddc3009 c199595d14)
Change-Id: I852cf4d68de6d6
(cherry picked from commit 370f2aa24256dc5