1. Foreman nightly release notes
1.2. Upgrade warnings
- Smart Proxy TLS configuration parameters have been renamed
-
The
ssl_disabled_ciphersandtls_disabled_versionsSmart Proxy parameters have been replaced bytls_ciphersandtls_min_version.-
ssl_disabled_ciphers(an array of cipher suites to disable) is replaced bytls_ciphers(an OpenSSL cipher string). When unset, the Smart Proxy auto-detects:PROFILE=SYSTEMif crypto-policies are present, otherwiseHIGH. -
tls_disabled_versions(an array of TLS versions to disable) is replaced bytls_min_version(a single minimum version:1.0,1.1,1.2, or1.3). When unset, the minimum version is determined by the system OpenSSL configuration.
If you customized these settings through
foreman-installer, the old parameters are automatically removed during upgrade. No automatic migration of values is performed. If you previously set custom TLS cipher or version restrictions, reconfigure them using the new parameters after upgrading. -
2. Katello nightly release notes
2.3. Deprecations
- The
katello-ca-consumerRPM package andkatello-rhsm-consumerscript -
The
katello-ca-consumerRPM package and thekatello-rhsm-consumerscript are deprecated and will be removed in a future release. Use the following alternatives instead:-
For registering hosts to Foreman server, use Registering hosts by using global registration in Managing hosts.
-
For deploying custom SSL certificates to hosts, use Refreshing the self-signed CA certificate on hosts in Managing hosts.
-