<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
It's hardcoded but works perfectly (I guess until next upgrade, but
anyway).<br>
<br>
A way how to disable sslv3 and support tls1.2 and 1.1 is that:<br>
<br>
Edit file /usr/bin/pveproxy<br>
Find "method => "tlsv1", comment it out.<br>
Now "ssleay" supports all tls versions and ssl versions.<br>
It's relatively easy to disable sslv3 by adding a line<br>
<br>
"sslv3 => 0,"<br>
<br>
Add it next to line you just commented.<br>
<br>
And to determine what ciphers are allowed, it's easy to edit this in
/etc/default/pveproxy<br>
<br>
Suggestion to Proxmox developers: this should be implemented to
configuration file which automatically gets distributed to all
nodes. It's logic that I want all nodes to use same cryptographic
algorithms, not just one.<br>
<br>
Keep up the good work!<br>
<br>
<div class="moz-cite-prefix">On 01.12.14 17:03, Sten Aus wrote:<br>
</div>
<blockquote cite="mid:547C8345.9090707@eenet.ee" type="cite">Hi
<br>
<br>
I tried to set /usr/bin/pveproxy ssl method value to tlsv1.2 or
tlsv12, but it did not work. How should I configure to use TLS v
1.2, not TLS v 1.0?
<br>
<br>
And where I can specify cipher_list for SSL to use?
<br>
<br>
Thanks!
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
pve-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a>
<a class="moz-txt-link-freetext" href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user">http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user</a>
</pre>
</blockquote>
<br>
</body>
</html>