We'd like to upgrade Zeus to 10.1 Release notes : https://support.riverbed.com/content/support/software/steelapp/traffic-manager.html This release includes SSL security fixes and a REST API memory leak fix.
As observed in bug 1200205 and bug 1200009, Zeus 10.1 unexpectedly altered the DH param size of three of our four clusters (scl3 int/ext, phx1 int) from 1024 to 2048 bit. PHX1 External was, surprisingly, unaffected, which indicates that we must have (at some point) tested DH 2048 there and reverted it, causing the default to be overridden. Around 9:45am this morning I reverted the DH size to 1024 bits, overriding the new default of 2048 bits. This resolves compatibility issues with Java 7 clients (QA Jenkins and New Relic), for now. We do intend someday to go to DH-2048, but in a controlled fashion.
The upgrade otherwise was completed successfully.
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.