Comment 11 for bug 1892450

Revision history for this message
Frode Nordahl (fnordahl) wrote :

> OVN-Central/Chassis charm for review of TLS 1.2 in OVN

The default behavior of the Open vSwitch clients and servers is to use the highest protocol version supported [0] and it has been this way since Open vSwitch v2.4.0 [1] which was released in 2014.

The default configuration does allow the use of TLSv1,TLSv1.1,TLSv1.2, so if the intention of this bug is to disallow protocol versions prior to TLSv1.2 that would translate into action necessary for the OVN charms.

0: http://manpages.ubuntu.com/manpages/focal/man1/ovsdb-server.1.html
1: https://github.com/openvswitch/ovs/commit/b56ea5d54e072105b398d26421f9a4578fa6e05b