Bug 907532

Summary:	Add support for SSLv3 when Apache is not used as proxy
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Idith Tal-Kohen <italkohe>
Component:	ovirt-engine-setup	Assignee:	Juan Hernández <juan.hernandez>
Status:	CLOSED ERRATA	QA Contact:	Pavel Stehlik <pstehlik>
Severity:	unspecified	Docs Contact:
Priority:	high
Version:	3.1.0	CC:	acathrow, bazulay, cpelland, dyasny, iheim, jbiddle, jlabocki, juan.hernandez, mgoldboi, Rhev-m-bugs, sgrinber, ykaul
Target Milestone:	---	Keywords:	ZStream
Target Release:	3.1.3
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	integration
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Previously, if Apache was not used as the proxy for the application server, the HTTPS connector would only configure TLSv1 protocol. Connections to the application server using SSLv3 protocol would fail. Now, SSLv3 is supported and can be used to connect to the application server.	Story Points:	---
Clone Of:	893979	Environment:
Last Closed:	2013-03-12 14:29:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	893979
Bug Blocks:

Comment 2 Juan Hernández 2013-02-11 16:26:36 UTC

Note that the option to disable TLSv1 isn't -no_tlsv1 but -no_tls1 (without the v). Check the s_client manual page for details. So the complete command to do the test should be like this:

  openssl s_client -connect f17.example.com:8701 -no_tls1

Comment 5 errata-xmlrpc 2013-03-12 14:29:15 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-0557.html