From 5aad40989c80bf6806012203ce01077fd5a518da Mon Sep 17 00:00:00 2001
From: Ossi Salmi <osalmi@iki.fi>
Date: Tue, 7 Oct 2014 14:06:30 +0300
Subject: [PATCH] ssl: Add ssl::ciphersuites from parameterize branch

---
 ssl/manifests/ciphersuites.pp | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 ssl/manifests/ciphersuites.pp

diff --git a/ssl/manifests/ciphersuites.pp b/ssl/manifests/ciphersuites.pp
new file mode 100644
index 0000000..75db2a2
--- /dev/null
+++ b/ssl/manifests/ciphersuites.pp
@@ -0,0 +1,29 @@
+#
+# Changelog:
+#
+#   Lets keep changelog for this file for easier auditing. Newest
+#   changes on top.
+#
+#   2014-04-14, oherrala
+#     Mozilla's recommended cipersuite list (document version 2.5.1)
+#   2014-07-21, osalmi
+#     Update to Version 3.1
+#
+class ssl::ciphersuites {
+
+  #
+  # Mozilla (document version 3.1)
+  #
+  #   Ref: https://wiki.mozilla.org/Security/Server_Side_TLS#Backward_Compatible_Ciphersuite
+  #
+  $mozilla_ciphersuites = 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK'
+
+  #
+  # Default ciphersuites
+  #
+  #   To overwrite default ciphersuites, add $site_ciphersuites with
+  #   list of you preferred ones.
+  #
+  $default_ciphersuites = $mozilla_ciphersuites
+
+}