{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/2658","labels_url":"https://api.github.com/repos/rancher/rancher/issues/2658/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/2658/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/2658/events","html_url":"https://github.com/rancher/rancher/issues/2658","id":116640594,"number":2658,"title":"[Load Balancer] LoadBalancer SSL vulnerable","user":{"login":"flower-pot","id":4546722,"avatar_url":"https://avatars.githubusercontent.com/u/4546722?v=3","gravatar_id":"","url":"https://api.github.com/users/flower-pot","html_url":"https://github.com/flower-pot","followers_url":"https://api.github.com/users/flower-pot/followers","following_url":"https://api.github.com/users/flower-pot/following{/other_user}","gists_url":"https://api.github.com/users/flower-pot/gists{/gist_id}","starred_url":"https://api.github.com/users/flower-pot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/flower-pot/subscriptions","organizations_url":"https://api.github.com/users/flower-pot/orgs","repos_url":"https://api.github.com/users/flower-pot/repos","events_url":"https://api.github.com/users/flower-pot/events{/privacy}","received_events_url":"https://api.github.com/users/flower-pot/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rancher/rancher/labels/area/balancer-ssl","name":"area/balancer-ssl","color":"fbca04"},{"url":"https://api.github.com/repos/rancher/rancher/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/rancher/rancher/labels/release/v1.0.0","name":"release/v1.0.0","color":"bfdadc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-11-12T21:08:58Z","updated_at":"2016-01-19T21:34:16Z","closed_at":null,"body":"I just tried out the SSL termination feature of the loadbalancer. Once I installed the certificate, I did an SSL Server Test on ssllabs.com\r\n\r\nUnfortunately it got an F, because the used OpenSSL version is exploitable.\r\n\r\n    This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable. Grade set to F.\r\n\r\nThe used openssl version in the `rancher/agent-instance:v0.5.0` image is `OpenSSL 1.0.1f 6 Jan 2014`. From what I can tell this should be fixed by using a newer package version."},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/172994290","html_url":"https://github.com/rancher/rancher/issues/2658#issuecomment-172994290","issue_url":"https://api.github.com/repos/rancher/rancher/issues/2658","id":172994290,"user":{"login":"vincent99","id":753917,"avatar_url":"https://avatars.githubusercontent.com/u/753917?v=3","gravatar_id":"","url":"https://api.github.com/users/vincent99","html_url":"https://github.com/vincent99","followers_url":"https://api.github.com/users/vincent99/followers","following_url":"https://api.github.com/users/vincent99/following{/other_user}","gists_url":"https://api.github.com/users/vincent99/gists{/gist_id}","starred_url":"https://api.github.com/users/vincent99/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vincent99/subscriptions","organizations_url":"https://api.github.com/users/vincent99/orgs","repos_url":"https://api.github.com/users/vincent99/repos","events_url":"https://api.github.com/users/vincent99/events{/privacy}","received_events_url":"https://api.github.com/users/vincent99/received_events","type":"User","site_admin":false},"created_at":"2016-01-19T21:34:16Z","updated_at":"2016-01-19T21:34:16Z","body":"Pretty sure this was fixed a while ago in `agent-instance:v0.6.0`."}}