[RHOCP 4] Unable to add weak SSL cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' to Ingress Controller
Issue
-
After adding weak
SSL cipher
TLS_RSA_WITH_AES_256_CBC_SHA
getting the below error in router pod logs:unable to set SSL cipher list to 'TLS_RSA_WITH_AES_256_CBC_SHA' for bind '127.0.0.1:10443' at /var/lib/haproxy/conf/haproxy.config
- Unable to add weak
cipher
TLS_RSA_WITH_AES_256_CBC_SHA
to Ingress Controller - After adding
cipher
TLS_RSA_WITH_AES_256_CBC_SHA
to Ingress Controller router pods are not coming up.
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.