Bug 1153742

Summary:	Disable SSLv3 in candlepins tomcat configuration.
Product:	[Retired] Subscription Asset Manager	Reporter:	Adrian Likins <alikins>
Component:	candlepin	Assignee:	Katello Bug Bin <katello-bugs>
Status:	CLOSED WONTFIX	QA Contact:	SAM QE List <sam-qe-list>
Severity:	high	Docs Contact:
Priority:	medium
Version:	Nightly	CC:	dnagarat
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1153815 (view as bug list)		Environment:
Last Closed:	2017-06-26 20:39:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1153815

Description Adrian Likins 2014-10-16 17:02:34 UTC

Description of problem:
Change the default tomcat server.xml to only support
TLSv1.2,TLSv1.1, TLSv1 and to skip SSLv3 to mitigate
poodle SSLv3 attack (CVE-2014-3566)

Comment 1 Bryan Kearney 2017-06-26 20:39:52 UTC

The release of Satellite 5.8 we are deprecating the support of Subscription Asset Manager. The release notes for 5.8 can be found at https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/pdf/release_notes/Red_Hat_Satellite-5.8-Release_Notes-en-US.pdf.

I am therefore closing out this bug as WONTFIX. If you believe this to be an error, please feel free tor each out to either Rich Jerrido or Bryan Kearney. Thank you!