openstack
/
openstack-ansible-os_barbican
Code Issues Proposed changes

Provide default barbican_ssl variables 

Provide default 'barbican_ssl_protocol' and 'barbican_ssl_cipher_suite'
variables for when this role is run outside of an integrated
OpenStack-Ansible deployment.

Change-Id: Ic56b71b27713250e80407fe9dabec3c1a0909f15
This commit is contained in:
Jimmy McCrory 2017-02-09 17:53:00 -08:00
parent d0d2acb846
commit 6e11d8c747
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
defaults/main.yml
View File

@ -114,8 +114,8 @@ barbican_ssl: false
barbican_ssl_cert: /etc/ssl/certs/barbican.pem
barbican_ssl_key: /etc/ssl/private/barbican.key
barbican_ssl_ca_cert: /etc/ssl/certs/barbican-ca.pem
barbican_ssl_protocol: "{{ ssl_protocol }}"
barbican_ssl_cipher_suite: "{{ ssl_cipher_suite }}"
barbican_ssl_protocol: "{{ ssl_protocol | default('ALL -SSLv2 -SSLv3') }}"
barbican_ssl_cipher_suite: "{{ ssl_cipher_suite | default('ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS') }}"
# if using a self-signed certificate, set this to true to regenerate it
barbican_ssl_self_signed_regen: false