Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-5236

Quay Config Editor should make sure latest SSL_PROTOCOLS are applied in configuration

    XMLWordPrintable

Details

    • False
    • None
    • False
    • Not Selected
    • 0
    • 0% 0%
    • 0

    Description

      Problem :

      • If SSL_PROTOCOLS was manually set to TLSv1.2 in the past, in the latest versions of quay, config-editor will not add TLSv1.3 unless old configurations are changed manually.
      • Quay config-editor tool does not add ssl related configurations to config.yaml or add latest available values to those configuration fields.
      $ grep SSL config.yaml 
      $ grep -i SSL config.yaml 
      $ grep -i TLS config.yaml 
      EXTERNAL_TLS_TERMINATION: true
      MAIL_USE_TLS: false
      REPO_MIRROR_TLS_VERIFY: true
      

      Expectations:

      • Set default value of SSL_PROTOCOL to latest protocol available. Eg: TLSv1.3
      • Option to set SSL_PROTOCOL from quay-config-editor. Give customer an option to use TLSv1.2 or TLSv1.3
      • Editor-tool should add SSL configurations + default values to its generated config.yaml file
      • Have a warning message and inform the user that TLSv1.3 latest protocol is not being used and they can add it.

      Attachments

        Activity

          People

            Unassigned Unassigned
            rhn-support-sbhavsar Sayali Bhavsar
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated: