Details
Description
With SSLV3, there are requirements to block TLS 1.1 and lower. Only TLS 1.2 and higher should be allowed.
Need a way to configure this setting in Couchbase.
It will be good to have a single switch across 3 components rather than 3 separate switches.
Attachments
Issue Links
- blocks
-
MB-17211 4.1.1 Minor Release
-
- Closed
-
Gerrit Reviews
| For Gerrit Dashboard: MB-18018 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 60074,4 | MB-18018: Disable TLS < 1.2 on platforms with support for it | master | memcached | Status: ABANDONED | 0 | +1 |
| 61066,1 | MB-18018 introduce global ssl_minimum_protocol flag | master | ns_server | Status: ABANDONED | 0 | +1 |
| 61067,1 | MB-18018 pass ssl_minimum_protocol to memcached | master | ns_server | Status: ABANDONED | 0 | +1 |
| 61068,1 | MB-18018 notify ssl related services about ssl_minimum_protocol | master | ns_server | Status: ABANDONED | 0 | +1 |
| 61069,1 | MB-18018 do not allow to filter out all ssl versions | master | ns_server | Status: ABANDONED | 0 | +1 |
| 61098,2 | MB-18018 introduce global ssl_minimum_protocol flag | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61099,2 | MB-18018 pass ssl_minimum_protocol to memcached | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61100,2 | MB-18018 notify ssl related services about ssl_minimum_protocol | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61101,2 | MB-18018 do not allow to filter out all ssl versions | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61111,2 | MB-18018 no need to reload xdcr_proxy explicitly | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61112,2 | MB-18018 pass ssl_minimum_protocol to cbq engine | sherlock | ns_server | Status: MERGED | +2 | +1 |
| 61273,1 | Merge remote-tracking branch 'gerrit/sherlock' | master | ns_server | Status: MERGED | +2 | +1 |