openstack/openstack-ansible-galera_server
Code Issues Proposed changes

Limit Galera SSL to TLSv1.2 ciphers

Browse Source 
When 'galera_use_ssl' is enabled, only allow TLSv1.2 supported cipher
suites.

Change-Id: Ifd2686ce64a92614b1dac5b8a5819461bf6d9d90
This commit is contained in:
Jimmy McCrory
2017-12-13 16:18:16 -08:00
parent 4a401cbf4f
commit 43458a865f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
templates/my.cnf.j2
View File

@@ -37,6 +37,7 @@ server-id = {{ galera_server_id }}
ssl-ca = {{ galera_ssl_ca_cert }} ssl-ca = {{ galera_ssl_ca_cert }}
ssl-cert = {{ galera_ssl_cert }} ssl-cert = {{ galera_ssl_cert }}
ssl-key = {{ galera_ssl_key }} ssl-key = {{ galera_ssl_key }}
ssl-cipher = TLSv1.2
{% endif %} {% endif %}
# LOGGING # # LOGGING #