The Red Hat OpenStack Security DFG has an effort to enable TLS in all OpenStack endpoints called "TLS Everywhere". It was reported by one of our customers that the caching service was not covered by it. Therefore, we need to enable TLS on Memcached.
This feature is also required in OpenStack Platform 13, which uses RHEL 7. So I'd like to raise the discussion on how hard is to get this backported since RHEL 7 has Memcached 1.4.x while the TLS feature only came up in 1.5.13 and also depends on a newer version of OpenSSL.
Great, thanks Tomas.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (memcached bug fix and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.