Bug 1578050

Summary:	Need to disable weak cipher in libvirt port 16514
Product:	Red Hat Enterprise Linux 7	Reporter:	Frank DeLorey <fdelorey>
Component:	libvirt	Assignee:	Libvirt Maintainers <libvirt-maint>
Status:	CLOSED DUPLICATE	QA Contact:	Fangge Jin <fjin>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	7.6	CC:	jtomko, lmen, rbalakri, xuzhang
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-05-15 07:13:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Frank DeLorey 2018-05-14 17:44:59 UTC

Description of problem:

Customer is reporting that there security sweep is report RC4 and 3DES ciphers are enabled to libvirt on port 16514.


Version-Release number of selected component (if applicable):

libvirt-3.2.0-14.el7_4.7.x86_64 

How reproducible:

Every time

Actual results:

Security sweep is finding weak ciphers RC4 and 3DES are enabled on port 16514

Expected results:

We should have have these weak ciphers enabled

Additional info:

Comment 2 Ján Tomko 2018-05-15 07:13:12 UTC

You can use:
tls_priority="NORMAL:-VERS-SSL3.0:-ARCFOUR-128:-3DES-CBC"
in /etc/libvirt/libvirtd.conf
to forbid these as well as SSLv3.

*** This bug has been marked as a duplicate of bug 1333404 ***