tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apache: Use $ssl::ciphersuites::default_ciphersuites for SSL sites.

Browse source
This commit is contained in:
Timo Makinen 2014-12-19 12:36:18 +02:00
parent 3d8365c595
commit cea629a380
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apache/manifests/init.pp
View file

@ -6,6 +6,7 @@ import "redhat.pp"
class apache::common { class apache::common {
include lsof include lsof
include ssl::ciphersuites
case $::operatingsystem { case $::operatingsystem {
debian,ubuntu: { debian,ubuntu: {

2
apache/templates/site.https.conf.erb
View file

@ -22,7 +22,7 @@ SSLProtocol all -SSLv2 -SSLv3
# List the ciphers that the client is permitted to negotiate. # List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list. # See the mod_ssl documentation for a complete list.
SSLHonorCipherOrder On SSLHonorCipherOrder On
SSLCipherSuite RC4-SHA:HIGH:!ADH SSLCipherSuite <%= scope.lookupvar('ssl::ciphersuites::default_ciphersuites') %>
# Server Certificate: # Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate. If # Point SSLCertificateFile at a PEM encoded certificate. If