Change the SSL protocol of the console service for Puppet Enterprise 2015.2 to 2016.4.3

Erik Hansen
  • Updated
Did this solve your problem?
2 out of 6 found this helpful
Note: You can change SSL protocols in the console for later versions of Puppet Enterprise. See our documentation for PE 2019.1. Use the appropriate version for your deployment. For security reasons...

Read this full article with Puppet Support

Sign in to your account Learn more about Puppet products
Can't sign in? Get help

Related articles

Comments

2 comments

Date Votes
  • Rocky Giannini
    • Edited

    Thanks Erik, for the remediation you provided. Your solution fixed this issue for port 443, but not for port 8081. How do I remediate this for port 8081?

    Thanks. 

    0
  • Erik Hansen

    Hi Rocky,

    Are you using the latest version of PE (2017.2.1)?  We now have this document available, which describes setting the allowed protocols for all PE services in one go:

    https://docs.puppet.com/pe/latest/disable_tlsv1.html

    If you are on the 2016.4 series, you can use still use the following in Hiera for PuppetDB and port 8081 specifically:

    puppet_enterprise::puppetdb::jetty_ini::ssl_protocols:
      - "TLSv1.1"
      - "TLSv1.2"

     

    0

Please sign in to leave a comment.