{"action":"created","issue":{"url":"https://api.github.com/repos/theforeman/smart-proxy/issues/408","repository_url":"https://api.github.com/repos/theforeman/smart-proxy","labels_url":"https://api.github.com/repos/theforeman/smart-proxy/issues/408/labels{/name}","comments_url":"https://api.github.com/repos/theforeman/smart-proxy/issues/408/comments","events_url":"https://api.github.com/repos/theforeman/smart-proxy/issues/408/events","html_url":"https://github.com/theforeman/smart-proxy/pull/408","id":149550427,"number":408,"title":"Fixes #14719 - Allow TLSv1 for compatibility with some clients.","user":{"login":"smithj4","id":1105980,"avatar_url":"https://avatars.githubusercontent.com/u/1105980?v=3","gravatar_id":"","url":"https://api.github.com/users/smithj4","html_url":"https://github.com/smithj4","followers_url":"https://api.github.com/users/smithj4/followers","following_url":"https://api.github.com/users/smithj4/following{/other_user}","gists_url":"https://api.github.com/users/smithj4/gists{/gist_id}","starred_url":"https://api.github.com/users/smithj4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smithj4/subscriptions","organizations_url":"https://api.github.com/users/smithj4/orgs","repos_url":"https://api.github.com/users/smithj4/repos","events_url":"https://api.github.com/users/smithj4/events{/privacy}","received_events_url":"https://api.github.com/users/smithj4/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/theforeman/smart-proxy/labels/Needs%20testing","name":"Needs testing","color":"fbca04"},{"url":"https://api.github.com/repos/theforeman/smart-proxy/labels/Not%20yet%20reviewed","name":"Not yet reviewed","color":"009800"},{"url":"https://api.github.com/repos/theforeman/smart-proxy/labels/Waiting%20on%20contributor","name":"Waiting on contributor","color":"fad8c7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2016-04-19T18:55:58Z","updated_at":"2016-04-22T17:58:23Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/theforeman/smart-proxy/pulls/408","html_url":"https://github.com/theforeman/smart-proxy/pull/408","diff_url":"https://github.com/theforeman/smart-proxy/pull/408.diff","patch_url":"https://github.com/theforeman/smart-proxy/pull/408.patch"},"body":"Php in both RHEL 6 & 7 cannot connect to the Foreman smart-proxy if TLSv1 is not allowed. Setting php to use TLSv1 or above will only work if you have curl 7.34 or newer. RHEL6 comes with curl 7.19 and RHEL7 comes with curl 7.29. See:\r\n\r\nhttp://php.net/manual/en/function.curl-setopt.php#115993"},"comment":{"url":"https://api.github.com/repos/theforeman/smart-proxy/issues/comments/213530325","html_url":"https://github.com/theforeman/smart-proxy/pull/408#issuecomment-213530325","issue_url":"https://api.github.com/repos/theforeman/smart-proxy/issues/408","id":213530325,"user":{"login":"witlessbird","id":8957,"avatar_url":"https://avatars.githubusercontent.com/u/8957?v=3","gravatar_id":"","url":"https://api.github.com/users/witlessbird","html_url":"https://github.com/witlessbird","followers_url":"https://api.github.com/users/witlessbird/followers","following_url":"https://api.github.com/users/witlessbird/following{/other_user}","gists_url":"https://api.github.com/users/witlessbird/gists{/gist_id}","starred_url":"https://api.github.com/users/witlessbird/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/witlessbird/subscriptions","organizations_url":"https://api.github.com/users/witlessbird/orgs","repos_url":"https://api.github.com/users/witlessbird/repos","events_url":"https://api.github.com/users/witlessbird/events{/privacy}","received_events_url":"https://api.github.com/users/witlessbird/received_events","type":"User","site_admin":false},"created_at":"2016-04-22T17:58:23Z","updated_at":"2016-04-22T17:58:23Z","body":"@smithj4: I second @brandonweeks -- TLSv1.1 is going to be disabled as soon as we stop supporting ruby 1.8.7. \r\n@brandonweeks: not sure: I don't think we need to bother with enabling SSLv*, the setting can be limited to TLS only. Considering the low number of available versions of TLS, we could have dedicated settings, e.g. \"enable_tls_v1\" (true/false), enable tls_v1_1 (true/false). Alternatively, we can have \"disabled_tls\" (probably not a great name?) and list disabled versions of TLS there."}}