Stor2RRD and TLS

dickinsonzach

Does Stor2RRD 2.4.1 use TLS 1 or 1.1?  If it does, can we force using 1.2?  Thank you, Zach.

Pavel

Hi,

it all depends on installed third party tools like openssl etc.

We do not force anythow TLS usage, usually it does monitoring device which does not accept lower TLS.

What storage type we are talking about?

dickinsonzach

This is to IBM Storwize and Flash System.  7.8 and 8.1 for Storwize and 1.5 for Flash System.  Thank you, Zach.

Pavel

ok, it is about forcing ssh to use tls 1.2

if you know how to do it then either do it globally in /etc/ssh/ssh_config or in etc/stor2rrd.cfg in SSH variable.

I do not know how to force ssh, at least my man page does not say anything

Note that this might affect even other storages using ssh (scp)

dickinsonzach

Ah, understood.  It's more of how does SSH connect to the arrays.  Thank you, Zach.