All,

This is probably nothing but I've searched the mailing lists and can't find 
anything useful about this.  We're running our puppetmaster under FreeBSD 
at the day job (puppet 6.18), and we see errors like this on puppetserver 
startup in the logs:

WARN [async-dispatch-2] [o.e.j.u.s.S.config] Weak cipher suite 
TLS_DHE_RSA_WITH_AES_256_CBC_SHA enabled for 
InternalSslContextFactory@7beb914b[provider=null,keyStore=null,trustStore=null]
WARN [async-dispatch-2] [o.e.j.u.s.S.config] Weak cipher suite 
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA enabled for 
InternalSslContextFactory@3900153c[provider=null,keyStore=null,trustStore=null]

All in all, each warning is repeated several different times, and there's 
probably seven or eight different ciphers.

Java logging is...a mess, honestly, and it's pretty difficult to separate 
signal from noise when you're trying to debug something.

That said, I see release notes that something changed about weak ciphers in 
6.5, but we're not there yet.

Is this something I should worry about, or just ignore?


-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e50a1727-9c98-47ec-ad76-31cbcf1d1740n%40googlegroups.com.

Reply via email to