StackLight

SSlv3 should be disabled for Grafana and Kibana

  1. Series 1.0
  2. Bug #1667356
Bug #1667356 reported by Simon Pasquier
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StackLight
Fix Committed
High
Simon Pasquier
StackLight 1.1.0
1.0
Fix Committed
Undecided
Simon Pasquier
StackLight 1.0.1

Bug Description

The HAProxy configuration should forbid the use of SSLv3 when Kibana and Grafana frontends are served by HTTPS.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-plugin-elasticsearch-kibana (master)

Fix proposed to branch: master
Review: https://review.openstack.org/445362

Changed in lma-toolchain:
assignee: LMA-Toolchain Fuel Plugins (mos-lma-toolchain) → Simon Pasquier (simon-pasquier)
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-plugin-influxdb-grafana (master)

Fix proposed to branch: master
Review: https://review.openstack.org/445363

Simon Pasquier (simon-pasquier)
Changed in lma-toolchain:
milestone: 1.0.1 → 1.1.0
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-plugin-influxdb-grafana (master)

Reviewed: https://review.openstack.org/445363
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-influxdb-grafana/commit/?id=e0b6b025f74721add77f894b8559b2598d666b5b
Submitter: Jenkins
Branch: master

commit e0b6b025f74721add77f894b8559b2598d666b5b
Author: Simon Pasquier <email address hidden>
Date: Tue Mar 14 09:43:00 2017 +0100

    Disable SSLv3 in HAProxy

    Change-Id: I1f81cc5700f76c90f2c8cbbcf5ec67d0559c2ed5
    Partial-Bug: #1667356

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-plugin-elasticsearch-kibana (master)

Reviewed: https://review.openstack.org/445362
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-elasticsearch-kibana/commit/?id=2ed538655f0b8386a0401b653a10f2fe364193c1
Submitter: Jenkins
Branch: master

commit 2ed538655f0b8386a0401b653a10f2fe364193c1
Author: Simon Pasquier <email address hidden>
Date: Tue Mar 14 09:42:15 2017 +0100

    Disable SSLv3 in HAProxy

    Change-Id: I1b6914b8110f6ca7f9c18179e00e446e1ea4a5fd
    Partial-Bug: #1667356

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-plugin-elasticsearch-kibana (stable/1.0)

Fix proposed to branch: stable/1.0
Review: https://review.openstack.org/446884

Simon Pasquier (simon-pasquier)
Changed in lma-toolchain:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-plugin-influxdb-grafana (stable/1.0)

Fix proposed to branch: stable/1.0
Review: https://review.openstack.org/446885

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-plugin-elasticsearch-kibana (stable/1.0)

Reviewed: https://review.openstack.org/446884
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-elasticsearch-kibana/commit/?id=981ba273f3b583bfb284ef771932d695c0280248
Submitter: Jenkins
Branch: stable/1.0

commit 981ba273f3b583bfb284ef771932d695c0280248
Author: Simon Pasquier <email address hidden>
Date: Tue Mar 14 09:42:15 2017 +0100

    Disable SSLv3 in HAProxy

    Change-Id: I1b6914b8110f6ca7f9c18179e00e446e1ea4a5fd
    Partial-Bug: #1667356
    (cherry picked from commit 2ed538655f0b8386a0401b653a10f2fe364193c1)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-plugin-influxdb-grafana (stable/1.0)

Reviewed: https://review.openstack.org/446885
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-influxdb-grafana/commit/?id=a97e97381eb2e58e13aa78554fa0c52c1a238ab6
Submitter: Jenkins
Branch: stable/1.0

commit a97e97381eb2e58e13aa78554fa0c52c1a238ab6
Author: Simon Pasquier <email address hidden>
Date: Tue Mar 14 09:43:00 2017 +0100

    Disable SSLv3 in HAProxy

    Change-Id: I1f81cc5700f76c90f2c8cbbcf5ec67d0559c2ed5
    Partial-Bug: #1667356

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.