From: Grant Slater <git@firefishy.com>
Date: Fri, 26 Aug 2016 16:23:30 +0000 (+0100)
Subject: tilecache: override default ssl ciphers
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/0a45323df4ebd77ecee44788fdd188483e683385?hp=241a2bab0581e189ae2ece711e46b8b081a74ce0

tilecache: override default ssl ciphers
---

diff --git a/roles/tilecache.rb b/roles/tilecache.rb
index 438f61992..6ae82d476 100644
--- a/roles/tilecache.rb
+++ b/roles/tilecache.rb
@@ -31,6 +31,9 @@ default_attributes(
         "vm.swappiness" => "30"
       }
     }
+  },
+  :ssl => {
+    :ciphers => "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS"
   }
 )