{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/3097","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/3097/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/3097/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/3097/events","html_url":"https://github.com/rancher/rancher/issues/3097","id":123134256,"number":3097,"title":"Allow overriding default SSL/TLS version support for load balancers","user":{"login":"aldeed","id":3012067,"avatar_url":"https://avatars.githubusercontent.com/u/3012067?v=3","gravatar_id":"","url":"https://api.github.com/users/aldeed","html_url":"https://github.com/aldeed","followers_url":"https://api.github.com/users/aldeed/followers","following_url":"https://api.github.com/users/aldeed/following{/other_user}","gists_url":"https://api.github.com/users/aldeed/gists{/gist_id}","starred_url":"https://api.github.com/users/aldeed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aldeed/subscriptions","organizations_url":"https://api.github.com/users/aldeed/orgs","repos_url":"https://api.github.com/users/aldeed/repos","events_url":"https://api.github.com/users/aldeed/events{/privacy}","received_events_url":"https://api.github.com/users/aldeed/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rancher/rancher/labels/area/balancer","name":"area/balancer","color":"FBCA04"},{"url":"https://api.github.com/repos/rancher/rancher/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/rancher/rancher/labels/release/future","name":"release/future","color":"bfdadc"},{"url":"https://api.github.com/repos/rancher/rancher/labels/status/to-test","name":"status/to-test","color":"66aa66"}],"state":"closed","locked":false,"assignee":{"login":"sangeethah","id":4266958,"avatar_url":"https://avatars.githubusercontent.com/u/4266958?v=3","gravatar_id":"","url":"https://api.github.com/users/sangeethah","html_url":"https://github.com/sangeethah","followers_url":"https://api.github.com/users/sangeethah/followers","following_url":"https://api.github.com/users/sangeethah/following{/other_user}","gists_url":"https://api.github.com/users/sangeethah/gists{/gist_id}","starred_url":"https://api.github.com/users/sangeethah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sangeethah/subscriptions","organizations_url":"https://api.github.com/users/sangeethah/orgs","repos_url":"https://api.github.com/users/sangeethah/repos","events_url":"https://api.github.com/users/sangeethah/events{/privacy}","received_events_url":"https://api.github.com/users/sangeethah/received_events","type":"User","site_admin":false},"milestone":null,"comments":5,"created_at":"2015-12-20T04:57:05Z","updated_at":"2016-02-09T15:48:17Z","closed_at":"2016-01-29T20:14:46Z","body":"Thank you for the new haproxy config abilities, but unfortunately since your template sets `no-sslv3 no-tlsv10` on each bind, there does not seem to be any way to override that. Can you use a global `ssl-default-bind-options no-sslv3 no-tlsv10` instead, and allow us to override by adding for example `ssl-default-bind-options no-sslv3` in the \"Global\" section, which would replace your default line and therefore enable TLS 1.0? (Our end goal is just to enable 1.0 a little while longer while until all our clients support 1.2)"},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/181921855","html_url":"https://github.com/rancher/rancher/issues/3097#issuecomment-181921855","issue_url":"https://api.github.com/repos/rancher/rancher/issues/3097","id":181921855,"user":{"login":"aldeed","id":3012067,"avatar_url":"https://avatars.githubusercontent.com/u/3012067?v=3","gravatar_id":"","url":"https://api.github.com/users/aldeed","html_url":"https://github.com/aldeed","followers_url":"https://api.github.com/users/aldeed/followers","following_url":"https://api.github.com/users/aldeed/following{/other_user}","gists_url":"https://api.github.com/users/aldeed/gists{/gist_id}","starred_url":"https://api.github.com/users/aldeed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aldeed/subscriptions","organizations_url":"https://api.github.com/users/aldeed/orgs","repos_url":"https://api.github.com/users/aldeed/repos","events_url":"https://api.github.com/users/aldeed/events{/privacy}","received_events_url":"https://api.github.com/users/aldeed/received_events","type":"User","site_admin":false},"created_at":"2016-02-09T15:48:17Z","updated_at":"2016-02-09T15:48:17Z","body":"@sangeethah We upgraded and this does not work. From what I can tell, `ssl-default-bind-options` was introduced in haproxy 1.5.7 and the LB is using haproxy 1.5.4. It seems like https://github.com/rancher/rancher/issues/3499 will fix this, but is there a way we can bump the haproxy version used on Rancher 0.56.1 LB?"}}