openstack/kolla-ansible
Code Issues Proposed changes

Merge "Disable TLS 1.1 on haproxy"

Browse Source
This commit is contained in:
Zuul 2018-07-23 06:38:11 +00:00 committed by Gerrit Code Review
commit c83e9d194b
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/roles/haproxy/templates/haproxy.cfg.j2
View File

@ -16,7 +16,7 @@ global
stats socket /var/lib/kolla/haproxy/haproxy.sock group kolla mode 660 stats socket /var/lib/kolla/haproxy/haproxy.sock group kolla mode 660
{% if kolla_enable_tls_external | bool %} {% if kolla_enable_tls_external | bool %}
ssl-default-bind-ciphers DEFAULT:!MEDIUM:!3DES ssl-default-bind-ciphers DEFAULT:!MEDIUM:!3DES
ssl-default-bind-options no-sslv3 no-tlsv10 ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11
tune.ssl.default-dh-param 4096 tune.ssl.default-dh-param 4096
{% endif %} {% endif %}

5
releasenotes/notes/disable_tlsv11-51d6be67d593f7ab.yaml Normal file
View File

@ -0,0 +1,5 @@
---
security:
- |
Disable TLS 1.1 on haproxy for external network if
tls is enabled.