changed cipher suites on my proj dev/test instances to get rid of tls1.0

diff --git a/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml b/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
index 22d0b96b0ab3deeeb162ef3aa9dadb5fc5aa1d5f..26b1dc5d0b4ede51d6fa8036e4a0f12853219344 100644 (file)
--- a/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
+++ b/customer/deuwo/dev-web01-deutsche-wohnen-com.pixelpark.net.yaml
@@ -28,6 +28,8 @@ infra::additional_classes:
 #zabbix::agent::manage_repo: false
 #zabbix::repo::version: '3.4'
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 accounts::users:
   jenkins:
     apply: true

diff --git a/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml b/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
index b3c5ee2eb9d92d0df0af723e5f83bb9d6d73ca1d..1e056c8c425fe47c64d1e35ebf0c75b30575fd0d 100644 (file)
--- a/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
+++ b/customer/deuwo/test-web01-deutsche-wohnen-com.pixelpark.net.yaml
@@ -28,6 +28,8 @@ infra::additional_classes:
 #zabbix::agent::manage_repo: false
 #zabbix::repo::version: '3.4'
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 accounts::users:
   jenkins:
     apply: true

diff --git a/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml b/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
index 827ffe3dd362e8368bbdb02c55b73b270ef42114..1e14bc44914c6cf3c8fad1ce3e6d8f445b8c4301 100644 (file)
--- a/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
+++ b/customer/mwide-nrw/dev-startercenter-nrw-de.pixelpark.net.yaml
@@ -5,6 +5,8 @@ infra::additional_classes:
   - infra::profile::drupal
   - solr
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 sudo::configs:
   becomeApache:
     priority: "06"

diff --git a/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml b/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
index cd58dfabe0ff8aa838696266e3ae9ea32ef5fec5..bdec46bd42feffa185f424ae9bb8f89db7dd10b3 100644 (file)
--- a/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
+++ b/customer/mwide-nrw/test-startercenter-nrw-de.pixelpark.net.yaml
@@ -5,6 +5,8 @@ infra::additional_classes:
   - infra::profile::drupal
   - solr
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'  
+
 sudo::configs:
   becomeApache:
     priority: "06"
@@ -24,7 +26,7 @@ accounts::users:
   andreas.pinto-koehler:
     apply: true
     sudo: true
-    
+
 mysql::server::root_password: ENC[PKCS7,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]
 
 

diff --git a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
index 17ca5306e60daff05a20c40de0e52b1bd9d1c3de..d179b5f66488aa218d5f52540a78e8c620bed822 100644 (file)
--- a/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
+++ b/customer/pixelpark-piwik/test-webstats01.pixelpark.net.yaml
@@ -9,6 +9,8 @@ infra::additional_classes:
   - infra::profile::postfix
   - infra::profile::apache_php
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 # users and deploy users
 accounts::users:
   jenkins: