https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/OPNFLWPLUG-485 OpenFlowPlugin <p>Openflow plugin uses TLS without restricting the cipher list to eliminate various ciphers which have been found vulnerable:</p> <p>RC4 - RFC 7465<br/> Export ciphers - LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000</p> <p>This is presently being worked on the controller project as bugs 3351, 3352, 3353.</p> <p>3352 should provide the relevant configuration mechanisms and utility classes for other projects to use to configure ciphers for native (not http) tls correctly.</p> <p>Operating System: All<br/> Platform: All</p> OPNFLWPLUG-485

Address various encryption related CVEs and RFCs

Bug Resolved Done Unassigned Anton Ivanov Thu, 4 Jun 2015 16:02:39 +0000 Mon, 27 Sep 2021 09:01:34 +0000 Wed, 9 Sep 2015 13:56:06 +0000 General 0 0 <p>Sorry, got the depends wrong.</p> <p>This depends on 3552, not 3352</p> <p>This is now configurable globally via a settable security property which allows to turn on/off specific protocols. This is honored by netty so it should work correctly for the openflow plugign.</p> Blocks CONTROLLER-1354 Development External issue ID 3585 External issue URL Rank 0|i031fz: