mirror.MikroTik/ansible-collections.community.routeros
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.routeros.git synced 2025-06-21 17:39:04 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Disable use of deprecated Ciphers (#34)

Browse source 
* Disable use of depricated Ciphers

Old ciphers shouldn't be used. Devices that use newer ciphers couldn't be reached as the cipher was locked to sslv3.

* chore: add changelog fragment
This commit is contained in:
Jadyn 2021-06-15 19:14:34 +02:00 • committed by GitHub
parent 1913a0d4bf
commit b45baaa158
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
changelogs/fragments/34-api-ciphers.yml Normal file
View file

@ -0,0 +1,2 @@
bugfixes:
- "api - when using TLS/SSL, remove explicit cipher configuration to insecure values, which also makes it impossible to connect to newer RouterOS versions (https://github.com/ansible-collections/community.routeros/pull/34)."

1
plugins/modules/api.py
View file

@ -451,7 +451,6 @@ class ROS_api_module:
conn_status["connection"]["port"] = port conn_status["connection"]["port"] = port
ctx = ssl.create_default_context() ctx = ssl.create_default_context()
ctx.check_hostname = False ctx.check_hostname = False
ctx.set_ciphers('ADH:@SECLEVEL=0')
api = connect(username=username, api = connect(username=username,
password=password, password=password,
host=host, host=host,