octavia/releasenotes
Adam Harwell 89a2f6e013 Fix urgent amphora two-way auth security bug
The value of gunicorn's option 'cert_reqs` for client-cert requirement
does not take a boolean, but rather `ssl.CERT_REQUIRED` which is `2`.

Story: 2006660
Task: 36916

SecurityImpact: CVE-2019-17134

Change-Id: I5619f5e40d7c9a2ee7741bf4664c0d2d08963992
(cherry picked from commit 2c9af84bdf)
(cherry picked from commit 998163af97)
(cherry picked from commit 672990df69)
(cherry picked from commit fd289ff759)
2019-10-04 20:17:23 +00:00
..
notes Fix urgent amphora two-way auth security bug 2019-10-04 20:17:23 +00:00
source Imported Translations from Zanata 2018-02-07 21:36:26 +00:00