Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2016-2183: Change cipher for kubernetes certificates #251

Closed
2 of 3 tasks
okozachenko1203 opened this issue Nov 15, 2023 · 1 comment · Fixed by #261, #255 or #338
Closed
2 of 3 tasks

CVE-2016-2183: Change cipher for kubernetes certificates #251

okozachenko1203 opened this issue Nov 15, 2023 · 1 comment · Fixed by #261, #255 or #338
Assignees

Comments

@okozachenko1203
Copy link
Member

okozachenko1203 commented Nov 15, 2023

This is an umbrella issue.
There are 3 components for tls-cipher, apiserver, kubelet, and etcd.

mnaser added a commit that referenced this issue Nov 30, 2023
This patch allows you to configure TLS cipher suites for the
API server with a sane set of secure defaults.

Closes #251
mnaser added a commit that referenced this issue Nov 30, 2023
This patch allows you to configure TLS cipher suites for the
API server with a sane set of secure defaults.

Closes #251
mnaser added a commit that referenced this issue Nov 30, 2023
This patch allows you to configure TLS cipher suites for the
API server with a sane set of secure defaults.

Closes #251
mnaser added a commit that referenced this issue Nov 30, 2023
This patch allows you to configure TLS cipher suites for the
API server with a sane set of secure defaults.

Closes #251
mnaser added a commit that referenced this issue Dec 5, 2023
This patch allows you to configure TLS cipher suites for the
API server with a sane set of secure defaults.

Closes #251
@okozachenko1203 okozachenko1203 self-assigned this Dec 6, 2023
@okozachenko1203
Copy link
Member Author

For verification, I used both clients who use tls1.3 and tls1.2.
I couldn't find openssl 1.0.1 so I did test using openssl 1.0.2 jamiehewland/openssl:1.0.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment