openstack/openstack-ansible-os_horizon
Code Issues Proposed changes

Use horizon_ssl_protocol variable

Browse Source 
This fix help in overriding the required ssl_protocol. Enabling TLS 1.0 and
TLS 1.1 as it prone to TLS Supported Cipher Suites Vulnerability and
using TLSv1.2 will remediate this vulnerability.

Change-Id: I4f7541a1e8e24e38aa8b9dcd84171c380d04c3d8
This commit is contained in:
Tom Jose Kalapura 2017-02-28 21:05:25 -08:00
parent e097fb9890
commit 896b2c72cf
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/openstack_dashboard.conf.j2
View File

@ -24,7 +24,7 @@
SSLCACertificateFile {{ horizon_ssl_ca_cert }} SSLCACertificateFile {{ horizon_ssl_ca_cert }}
{% endif -%} {% endif -%}
SSLCompression Off SSLCompression Off
SSLProtocol All -SSLv2 -SSLv3 SSLProtocol {{ horizon_ssl_protocol }}
SSLHonorCipherOrder On SSLHonorCipherOrder On
SSLCipherSuite {{ horizon_ssl_cipher_suite }} SSLCipherSuite {{ horizon_ssl_cipher_suite }}
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown