Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667
Change-Id: Ifa6b377ef2c6f25ad11c1f4809a770a031534962
(cherry picked from commit 39006b77e2957aef818f2adaffe0392773ee99e2)
Reviewed: https:/ /review. openstack. org/161160 /git.openstack. org/cgit/ stackforge/ puppet- nova/commit/ ?id=ef7c618c0ea c3d8e2cb3427786 d80526d960b482
Committed: https:/
Submitter: Jenkins
Branch: stable/juno
commit ef7c618c0eac3d8 e2cb3427786d805 26d960b482
Author: Lukas Bezdicka <email address hidden>
Date: Fri Jan 2 22:49:10 2015 +0100
Switch to TLSv1 as SSLv3 is considered insecure and is disabled by default
Rabbitmq won't talk to us anymore if we try to use SSLv3 as it disabled
support for SSLv3. Openstack components use python's openssl
implementation which does not support TLSv1.1 and TLSv1.2 yet so we
just switch to TLSv1. Support for newer TLS should come with python
2.7.9+
Closes-Bug: #1409667 5ad11c1f4809a77 0a031534962 f818f2adaffe039 2773ee99e2)
Change-Id: Ifa6b377ef2c6f2
(cherry picked from commit 39006b77e2957ae