-
Bug
-
Resolution: Done
-
Blocker
-
maistra-2.0.0
-
None
-
None
-
MAISTRA 2.0.0
2.0 SMCP spec.security.controlPlane.tls failed to configure SMCP TLS version, cipherSuites and ecdhCurves
spec.istio.global.tls.minProtocolVersion:
spec.security.controlPlane.tls.maxProtocolVersion:
spec.security.controlPlane.tls.cipherSuites:
spec.security.controlPlane.tls.ecdhCurves:
change shows SMCP no change
How to produce:
1. OCP 4.5.7 with OSSM latest-2.0-qe installed
2. patch or update SMCP with
spec.security.controlPlane.tls.minProtocolVersion: TLSv1_2
spec.security.controlPlane.tls.maxProtocolVersion: TLSv1_2
spec.security.controlPlane.tls.cipherSuites:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256spec.security.controlPlane.tls.ecdhCurves:
CurveP256, CurveP384
3. Run testssl script
- is related to
-
MAISTRA-1774 Cleanup SMCP v2 struct
- Closed
-
MAISTRA-1787 Add support for setting Cipher Suites
- Closed