]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
changed ssl cipher suites on test-web01-pfizer-de revert
authorsascha.strassheim <sascha.strassheim@pixelpark.com>
Wed, 14 Feb 2018 12:22:26 +0000 (13:22 +0100)
committersascha.strassheim <sascha.strassheim@pixelpark.com>
Wed, 14 Feb 2018 12:22:26 +0000 (13:22 +0100)
customer/pfizer/dev-web01-pfizer-de.pixelpark.net.yaml
customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml

index a591b932998468900a4ee0be09d9b77843e3d129..512ff9b617467bf39975eeabb47db847b256ef1b 100644 (file)
@@ -110,8 +110,8 @@ infra::profile::drupal::projects:
     ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
-    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
-    ssl_protocols: 'TLSv1.2'
+#    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
+#    ssl_protocols: 'TLSv1.2'
 
 # dev-www.pfizer.de
 infra::profile::typo3::projects:
@@ -142,8 +142,8 @@ infra::profile::typo3::projects:
     ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
-    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
-    ssl_protocols: 'TLSv1.2'
+#    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
+#    ssl_protocols: 'TLSv1.2'
     directories:
       - provider: locationmatch
         path: '^/(?!(server-status|server-info))'
index da3022c8a9e54d523c621cb1b78f7848f33e259b..8567341989c721af83df7276853f3e4411fbbde1 100644 (file)
@@ -127,8 +127,8 @@ infra::profile::typo3::projects:
     ssl_cert: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
-    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
-    ssl_protocols: 'TLSv1.2'
+#    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
+#    ssl_protocols: 'TLSv1.2'
     headers:
       - 'set X-Frame-Options: ALLOW-FROM=http://pfizerprodedev8.prod.acquia-sites.com/'
       - 'set X-XSS-Protection: "1; mode=block"'