d5c3e19399
* implement the same SSL/TLS ciphers as for Fuel master node (disable
WEAK DHE ciphers but leave TLSv1 working: LP#1497195
* remove useless dh_param options because they not needed anymore
* move the ciphers list to the cluster::haproxy parameters and don't
repeat this list in the several configuration files (DRY)
* prepare for an upgrade and move the options list to global settings
too (DRY) (TODO)
* ssl_default_ciphers can be changed by end user via hiera
DocImpact
Change-Id: I5e5784521641ea3bbe3c4aa40c581f996b268aad
Closes-Bug: #1594359
Signed-off-by: Maksim Malchuk <mmalchuk@mirantis.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
cluster_haproxy.pp |