fuel-library/deployment/puppet/osnailyfacter/manifests/cluster_haproxy
Maksim Malchuk d5c3e19399 Fix SSL/TLS ciphers/options for HAProxy services
* implement the same SSL/TLS ciphers as for Fuel master node (disable
  WEAK DHE ciphers but leave TLSv1 working: LP#1497195
* remove useless dh_param options because they not needed anymore
* move the ciphers list to the cluster::haproxy parameters and don't
  repeat this list in the several configuration files (DRY)
* prepare for an upgrade and move the options list to global settings
  too (DRY) (TODO)
* ssl_default_ciphers can be changed by end user via hiera

DocImpact
Change-Id: I5e5784521641ea3bbe3c4aa40c581f996b268aad
Closes-Bug: #1594359
Signed-off-by: Maksim Malchuk <mmalchuk@mirantis.com>
(cherry picked from commit 996058cadd)
2016-06-28 23:44:23 +03:00
..
cluster_haproxy.pp Fix SSL/TLS ciphers/options for HAProxy services 2016-06-28 23:44:23 +03:00