[ClusterLabs] Corosync-Qdevice SSL Ciphers

[Somanath Jeeva]

Hi ,

In case the nss.config is not configured, what will be the ciphers used.



With Regards
Somanath Thilak J

-----Original Message-----
From: Jan Friesse <jfriesse at redhat.com> 
Sent: Wednesday, January 22, 2020 13:45
To: Cluster Labs - All topics related to open-source clustering welcomed <users at clusterlabs.org>; Somanath Jeeva <somanath.jeeva at ericsson.com>
Subject: Re: [ClusterLabs] Corosync-Qdevice SSL Ciphers

Somanath,

> Hi ,
> 
> Is there a way to find/restrict the list of ciphers used by corosync-qnetd similar to the PCSD_SSL_CIPHERS variable in /etc/sysconfig/pcsd configuration file.

Nope. But qnetd is using NSS so it is possible to change the system policy in /etc/crypto-policies/back-ends/nss.config and qnetd will use these settings.

Regards,
   Honza


> 
> 
> With Regards
> Somanath Thilak J
> 
> 
> 
> 
> _______________________________________________
> Manage your subscription:
> https://protect2.fireeye.com/v1/url?k=541c38c8-0896edde-541c7853-862f1
> 4a9365e-d4cfaa0b3e0660da&q=1&e=4a1cd511-8c19-49cb-a44c-4d34eba19a5c&u=
> https%3A%2F%2Flists.clusterlabs.org%2Fmailman%2Flistinfo%2Fusers
> 
> ClusterLabs home: 
> https://protect2.fireeye.com/v1/url?k=ef5b5666-b3d18370-ef5b16fd-862f1
> 4a9365e-6de4900a36a26f81&q=1&e=4a1cd511-8c19-49cb-a44c-4d34eba19a5c&u=
> https%3A%2F%2Fwww.clusterlabs.org%2F
>