openstack/tripleo-heat-templates
Code Issues Proposed changes

Disable live migration over TLS

Browse Source 
Due to the fact that it doesn't use a separate CA (or sub CA) for
libvirtd, and that proper SASL is not being used. We are disabling this
option since it doesn't meet the appropriate security requirements.
We'll look into adding this back once these issues get fixed.

Change-Id: I6a5e4db1b6dd6bc8b7e73e53b614b070d15b8a23
Closes-Bug: #1730370
This commit is contained in:
Juan Antonio Osorio Robles
2017-11-06 13:31:33 +02:00
parent e463ca15fb
commit 645757cbd6
3 changed files with 26 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
releasenotes/notes/libvirtd-tls-6de6fb35e0ac0ab1.yaml Normal file
View File

@@ -0,0 +1,6 @@
---
security:
- |
Live migration over TLS has been disabled since the settings it was using
don't meet the required security standards. It is currently not possible to
enable it via t-h-t.