Christian Heimes b57c818fab Use only TLS 1.2 by default ...

TLS 1.3 is causing some trouble with client cert authentication.
Conditional client cert authentication requires post-handshake
authentication extension on TLS 1.3. The new feature is not fully
implemented yet.

TLS 1.0 and 1.1 are no longer state of the art and now disabled by
default.

TLS 1.2 works everywhere and supports PFS.

Related: https://pagure.io/freeipa/issue/7667

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2019-07-01 14:55:29 +02:00

..

__init__.py

ipaplatform: Add Debian platform module.

2017-01-19 16:45:42 +01:00

constants.py

named.conf: Disable duplicate zone on debian, and modify data dir

2018-05-29 17:03:56 +02:00

paths.py

Add helper to look for missing binaries

2019-04-26 12:47:51 +02:00

services.py

Debian: Use RedHatCAService for pki-tomcatd

2019-04-24 14:08:20 +02:00

tasks.py

Use only TLS 1.2 by default

2019-07-01 14:55:29 +02:00