ansible/xoxys.ldap_proxy
1
0
Fork 0
Code Issues Pull Requests Releases Activity

fix: enable ECDHE ciphers and enforce TLS 1.2

Browse Source
This commit is contained in:
Robert Kaussow 2024-06-04 21:12:20 +02:00
parent 207de8b8e5
commit 95d39ff2be
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/etc/openldap/slapd.conf.j2
View File

@ -31,8 +31,9 @@ argsfile /var/run/openldap/slapd.args
TLSCertificateFile {{ ldap_proxy_tls_cert_path }}
TLSCertificateKeyFile {{ ldap_proxy_tls_key_path }}
TLSCACertificateFile {{ ldap_proxy_tls_ca_path }}
TLSCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
TLSProtocolMin 3.1
TLSCipherSuite HIGH:MEDIUM:-SSLv2:-SSLv3:!SHA1:!SHA256:!SHA384
TLSProtocolMin 3.3
TLSECName secp521r1
### Database definition (Proxy to AD) #########################################
database ldap