Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / 161f782409ee5b3e7165b478bfb31fc2c27a98cf / . / apache / server / ssl.yml
blob: b720d5d1286f57a06ab5115e41443db78cfd3735 [file] [log] [blame]
Mykyta Karpin6dc8dab2018-07-31 16:54:12 +0300[diff] [blame]1parameters:
2 _param:
3 apache_ssl_enabled: false
4 apache_ssl:
5 mode: 'strict'
6 enabled: ${_param:apache_ssl_enabled}
7 engine: salt
8 prefer_server_ciphers: "on"
9 protocols:
10 all:
11 name: 'all'
12 enabled: True
13 excludeSSLv2:
14 name: '-SSLv2'
15 enabled: True
16 excludeSSLv3:
17 name: '-SSLv3'
18 enabled: True
19 ciphers:
20 ECDHE-ECDSA-CHACHA20-POLY1305:
21 name: 'ECDHE-ECDSA-CHACHA20-POLY1305'
22 enabled: True
23 ECDHE-RSA-CHACHA20-POLY1305:
24 name: 'ECDHE-RSA-CHACHA20-POLY1305'
25 enabled: True
26 ECDHE-ECDSA-AES128-GCM-SHA256:
27 name: 'ECDHE-ECDSA-AES128-GCM-SHA256'
28 enabled: True
29 ECDHE-RSA-AES128-GCM-SHA256:
30 name: 'ECDHE-RSA-AES128-GCM-SHA256'
31 enabled: True
32 ECDHE-ECDSA-AES256-GCM-SHA384:
33 name: 'ECDHE-ECDSA-AES256-GCM-SHA384'
34 enabled: True
35 ECDHE-RSA-AES256-GCM-SHA384:
36 name: 'ECDHE-RSA-AES256-GCM-SHA384'
37 enabled: True
38 DHE-RSA-AES128-GCM-SHA256:
39 name: 'DHE-RSA-AES128-GCM-SHA256'
40 enabled: True
41 DHE-RSA-AES256-GCM-SHA384:
42 name: 'DHE-RSA-AES256-GCM-SHA384'
43 enabled: True
44 ECDHE-ECDSA-AES128-SHA256:
45 name: 'ECDHE-ECDSA-AES128-SHA256'
46 enabled: True
47 ECDHE-RSA-AES128-SHA256:
48 name: 'ECDHE-RSA-AES128-SHA256'
49 enabled: True
50 ECDHE-ECDSA-AES128-SHA:
51 name: 'ECDHE-ECDSA-AES128-SHA'
52 enabled: True
53 ECDHE-RSA-AES256-SHA384:
54 name: 'ECDHE-RSA-AES256-SHA384'
55 enabled: True
56 ECDHE-RSA-AES128-SHA:
57 name: 'ECDHE-RSA-AES128-SHA'
58 enabled: True
59 ECDHE-ECDSA-AES256-SHA384:
60 name: 'ECDHE-ECDSA-AES256-SHA384'
61 enabled: True
62 ECDHE-ECDSA-AES256-SHA:
63 name: 'ECDHE-ECDSA-AES256-SHA'
64 enabled: True
65 ECDHE-RSA-AES256-SHA:
66 name: 'ECDHE-RSA-AES256-SHA'
67 enabled: True
68 DHE-RSA-AES128-SHA256:
69 name: 'DHE-RSA-AES128-SHA256'
70 enabled: True
71 DHE-RSA-AES128-SHA:
72 name: 'DHE-RSA-AES128-SHA'
73 enabled: True
74 DHE-RSA-AES256-SHA256:
75 name: 'DHE-RSA-AES256-SHA256'
76 enabled: True
77 DHE-RSA-AES256-SHA:
78 name: 'DHE-RSA-AES256-SHA'
79 enabled: True
80 ECDHE-ECDSA-DES-CBC3-SHA:
81 name: 'ECDHE-ECDSA-DES-CBC3-SHA'
82 enabled: True
83 ECDHE-RSA-DES-CBC3-SHA:
84 name: 'ECDHE-RSA-DES-CBC3-SHA'
85 enabled: True
86 EDH-RSA-DES-CBC3-SHA:
87 name: 'EDH-RSA-DES-CBC3-SHA'
88 enabled: True
89 AES128-GCM-SHA256:
90 name: 'AES128-GCM-SHA256'
91 enabled: True
92 AES256-GCM-SHA384:
93 name: 'AES256-GCM-SHA384'
94 enabled: True
95 AES128-SHA256:
96 name: 'AES128-SHA256'
97 enabled: True
98 AES256-SHA256:
99 name: 'AES256-SHA256'
100 enabled: True
101 AES256-SHA:
102 name: 'AES256-SHA'
103 enabled: True
104 AES128-SHA:
105 name: 'AES128-SHA'
106 enabled: True
107 DES-CBC3-SHA:
108 name: 'DES-CBC3-SHA'
109 enabled: True
110 removeDSS:
111 name: '!DSS'
112 enabled: True