Before I go digging figured I would ask 1st.
I have a RH cluster using pcsd service. Vuln scan finds SSL issue on pcsd port 2224 (web gui). It's an older RH system running openSSL 1.0.1e.
I see that pcsd has a cfg file for types of ciphers supported through the daemon, but where does pcsd actually get the SSL functionality from? Does pcsd package have it's own implementation of SSL, or is it using the installed openSSL 1.0.1e ?
Knowing where pcsd gets SSL from will then direct me to either upgrade pcs or openSSL, etc. See, if it's in pcs install then upgrading openSSL won't help, etc.
I will also go get a yum deplist to see what it says.
