openstack/openstack-ansible
Code Issues Proposed changes

Fix definition of ssl_protocol

Browse Source 
The syntax for TLS 1.0 is incorrect for Apache servers
which appear to be the only users of this variable.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/823971
Change-Id: I4a66a5b24f03eadc0fe758065749a7ae15a013d8
This commit is contained in:
Andrew Bonney 2022-01-10 13:44:07 +00:00
parent 954567346e
commit b018162d37
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
inventory/group_vars/all/ssl.yml
View File

@ -16,7 +16,7 @@
## SSL
# These do not need to be configured unless you're creating certificates for
# services running behind Apache (currently, Horizon and Keystone).
ssl_protocol: "ALL -SSLv2 -SSLv3 -TLSv1.0 -TLSv1.1"
ssl_protocol: "ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1"
# Cipher suite string from https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS"