octavia/releasenotes/notes/fix-tls-hello-healthmonitors-a4b98a80f6de8394.yaml
Gregory Thiemonge 8e7c2737b6 Fix TLS-HELLO healthmonitors in the amphora-driver
TLS-HELLO HMs were based on the ssl-hello-chk option of haproxy, which
uses SSLv3 messages. SSLv3 is deprecated and most distributions have
disabled it, remove this option and rely only on the default checker
when ssl is enabled [0]

[0] https://docs.haproxy.org/2.8/configuration.html#5.2-check

Related-Bug: #2043812

Change-Id: Ia681679e24437832e1e23e7399e1a34da8ab54c5
2023-11-21 02:24:51 -05:00

5 lines
76 B
YAML

---
fixes:
- |
Fixed TLS-HELLO health-monitors in the amphora-driver.