1. Headline features

1.1. User interface & experience

1.2. Infrastructure & platform updates

1.3. Networking & connectivity

1.4. Clients

1.5. Documentation & tooling

2. Upgrade warnings

Smart Proxy TLS configuration parameters have been renamed

The ssl_disabled_ciphers and tls_disabled_versions Smart Proxy parameters have been replaced by tls_ciphers and tls_min_version.

  • ssl_disabled_ciphers (an array of cipher suites to disable) is replaced by tls_ciphers (an OpenSSL cipher string). When unset, the Smart Proxy auto-detects: PROFILE=SYSTEM if crypto-policies are present, otherwise HIGH.

  • tls_disabled_versions (an array of TLS versions to disable) is replaced by tls_min_version (a single minimum version: 1.0, 1.1, 1.2, or 1.3). When unset, the minimum version is determined by the system OpenSSL configuration.

If you customized these settings through foreman-installer, the old parameters are automatically removed during upgrade. No automatic migration of values is performed. If you previously set custom TLS cipher or version restrictions, reconfigure them using the new parameters after upgrading.

3. Deprecations

There are no deprecations with Foreman nightly.

Appendix A: Foreman contributors

Pre-release version Report issue