From 0a45323df4ebd77ecee44788fdd188483e683385 Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Fri, 26 Aug 2016 17:23:30 +0100 Subject: [PATCH] tilecache: override default ssl ciphers --- roles/tilecache.rb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/tilecache.rb b/roles/tilecache.rb index 438f61992..6ae82d476 100644 --- a/roles/tilecache.rb +++ b/roles/tilecache.rb @@ -31,6 +31,9 @@ default_attributes( "vm.swappiness" => "30" } } + }, + :ssl => { + :ciphers => "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS" } ) -- 2.43.2