Commit Graph

55 Commits

Author SHA1 Message Date
Fabian Grünbichler
41196653e1 Add DHPARAMS option in /etc/default/pveproxy
If set, Diffie-Hellman parameters in PEM format are loaded
from the given path. Otherwise, the built-in 'skip2048'
group is used.

Also fix some typos in the man page.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2016-01-26 16:44:17 +01:00
Fabian Grünbichler
ee0b96b15f Enable TLS 1.1 and 1.2, change default DH params
AnyEvent uses a built-in DH group defined as 'schmorp1539'
by default, which seems to trigger the bug in [1] for every
attempt of accessing the web GUI using IE11 and TLS1.2. By
switching to a bigger default DH group ('skip2048'), the
bug seems to be gone (or trigger sufficiently rarely).

1: http://engineering.imvu.com/2015/01/27/the-case-of-the-page-cant-be-displayed-intermittent-selenium-test/
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2016-01-26 16:42:53 +01:00
Emmanuel Kasper
faea780768 update build infrastucture to be able to develop with Ext6 2015-11-13 07:08:04 +01:00
Thomas Lamprecht
2ebf4aecf9 check for ext5 dir to avoid missing directory errors
As we, for now, default to exclude ext5 from our build it's better
to make an check if its directory exists, and only then allow to
load from it. Else we can get errors on proxy startup, and when
someone passes the ext5 parameter.

Also make a indent/whitespace cleanup.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-09-29 07:17:19 +02:00
Dietmar Maurer
4a17e72e77 convert pveproxy into a PVE::Service class 2015-09-04 14:16:25 +02:00