Bug 2224976 - [RFE]: TLS 1.3 Support for Foreman Proxy in Satellite 6
Summary: [RFE]: TLS 1.3 Support for Foreman Proxy in Satellite 6
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Capsule
Version: 6.13.3
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-07-24 07:19 UTC by Ganesh Payelkar
Modified: 2023-07-24 13:56 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-07-24 13:56:41 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Ganesh Payelkar 2023-07-24 07:19:44 UTC 
Description of problem:

Add TLS 1.3 Support for Foreman Proxy in Satellite 6

Version-Release number of selected component (if applicable):
satellite-6.13.2-1.el8sat.noarch
foreman-proxy-3.5.1-1.el8sat.noarch

How reproducible:
New installation

Steps to Reproduce:
1. Install the latest version of satellite 6 on RHEL 8
2. enable TLS 1.3 through custom-hiera.yaml
3. Test the connection through openssl/Curl 

Actual results:

2023-07-24T12:24:19  [E] <OpenSSL::SSL::SSLError> SSL_accept returned=1 errno=0 state=error: unsupported protocol
	/usr/share/gems/gems/webrick-1.7.0/lib/webrick/server.rb:302:in `accept'
	/usr/share/gems/gems/webrick-1.7.0/lib/webrick/server.rb:302:in `block (2 levels) in start_thread'
	/usr/share/gems/gems/webrick-1.7.0/lib/webrick/utils.rb:258:in `timeout'
	/usr/share/gems/gems/webrick-1.7.0/lib/webrick/server.rb:300:in `block in start_thread'
	/usr/share/gems/gems/logging-2.3.1/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'


Expected results:
The expectation for the Request for Enhancement (RFE) to add TLS 1.3 support in foreman-proxy
TLS 1.3 is the latest version of the TLS protocol and offers enhanced security and performance benefits over earlier versions. The expectation is that supporting TLS 1.3 will improve the overall security posture of Foreman Proxy and Satellite 6.

Additional info:
Note You need to log in before you can comment on or make changes to this bug.