Uploaded image for project: 'Network Edge'
  1. Network Edge
  2. NE-2333

Add support to OpenShift Router for configurable SSL curves in HAProxy configuration

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • None
    • Security & Compliance
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • None
    • None
    • None

      To support new PQC key exchanges add option to set default ssl curves.

      Adds a new environment variable ROUTER_CURVES.

      This is a colon delimited set of curves to use for ECDHE.
      Uses HAProxy's ssl-default-bind-curves to configure openssl's supported groups (https://docs.haproxy.org/3.1/configuration.html#ssl-default-bind-curves).

              rh-ee-nirichar Nicholas Richardson
              dsalerno@redhat.com Davide Salerno
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: