Nathan Kinder 08bdcdb5b6 Allow TLS ciphers/protocols to be configurable for console proxies ...

The console proxies (VNC, SPICE, etc) currently don't allow the
allowed TLS ciphers and protocol versions to be configurable.  This
results in the defaults being used from the underlying system,
which may not be secure enough for many deployments.  This patch
allows for the ciphers and minimum SSL/TLS protocol version for
each console proxy to be configured in nova's config.

We utilize websockify underneath our console proxies, which added
support for allowed ciphers and the SSL/TLS version to be
configurable as of version 0.9.0.  This change updates the lower
constraint for this dependency.

Closes-Bug: #1842149
Related-Bug: #1771773
Change-Id: I23ac1cc79482d0fabb359486a4b934463854cae5

2020-02-12 15:05:22 -06:00

..

__init__.py

Eventlet monkey patching should be as early as possible

2019-03-22 09:27:16 +00:00

api_metadata.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

api_os_compute.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

api.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

baseproxy.py

Allow TLS ciphers/protocols to be configurable for console proxies

2020-02-12 15:05:22 -06:00

common.py

Pass kwargs to exception to get better format of error message

2019-03-15 10:42:18 +08:00

compute.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

conductor.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

manage.py

Remove nova-manage network, floating commands

2019-11-23 13:05:32 +00:00

novncproxy.py

console: Provide an RFB security proxy implementation

2018-01-12 10:00:42 +00:00

policy.py

Use nova.db.api directly

2018-07-10 14:56:27 +00:00

scheduler.py

Remove deprecated monkey_patch config options

2018-05-16 11:40:41 -04:00

serialproxy.py

config options: centralize section "serial_console"

2015-11-19 11:00:20 +01:00

spicehtml5proxy.py

config options: centralize 'spice' options

2016-04-11 10:34:05 +00:00

status.py

Use Placement 1.34 (string suffixes & mappings)

2019-12-05 17:02:46 -06:00

xvpvncproxy.py

Pass config object to oslo_reports

2017-09-05 10:39:43 +00:00