Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/167330
Change subject: tendril - set SSL/TLS protocol versions
......................................................................
tendril - set SSL/TLS protocol versions
this already looked ok on neon, yet did not specify
versions here
Change-Id: I95454cecbcc86a9167486b01aa36bb56da85518b
---
M modules/tendril/templates/apache/tendril.wikimedia.org.erb
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/30/167330/1
diff --git a/modules/tendril/templates/apache/tendril.wikimedia.org.erb
b/modules/tendril/templates/apache/tendril.wikimedia.org.erb
index c918cf1..8fe6300 100644
--- a/modules/tendril/templates/apache/tendril.wikimedia.org.erb
+++ b/modules/tendril/templates/apache/tendril.wikimedia.org.erb
@@ -7,6 +7,7 @@
<VirtualHost *:443>
ServerName <%= @site_name %>
SSLEngine On
+ SSLProtocol +ALL -SSLv2 -SSLv3
SSLCertificateFile /etc/ssl/private/tendril.wikimedia.org.pem
SSLCertificateKeyFile /etc/ssl/private/tendril.wikimedia.org.key
SSLCACertificateFile /etc/ssl/certs/RapidSSL_CA.pem
--
To view, visit https://gerrit.wikimedia.org/r/167330
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I95454cecbcc86a9167486b01aa36bb56da85518b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
