ansible/xoxys.ldap_proxy
1
0
Fork 0
Code Issues Pull Requests Releases Activity

fix: enable ECDHE ciphers and enforce TLS 1.2 (#2)

Browse Source 
Reviewed-on: #2
This commit is contained in:
Robert Kaussow 2024-06-04 21:12:36 +02:00
parent 207de8b8e5
commit b23bef0fb6
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/etc/openldap/slapd.conf.j2
View File

@ -31,8 +31,9 @@ argsfile /var/run/openldap/slapd.args
TLSCertificateFile {{ ldap_proxy_tls_cert_path }} TLSCertificateFile {{ ldap_proxy_tls_cert_path }}
TLSCertificateKeyFile {{ ldap_proxy_tls_key_path }} TLSCertificateKeyFile {{ ldap_proxy_tls_key_path }}
TLSCACertificateFile {{ ldap_proxy_tls_ca_path }} TLSCACertificateFile {{ ldap_proxy_tls_ca_path }}
TLSCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4 TLSCipherSuite HIGH:MEDIUM:-SSLv2:-SSLv3:!SHA1:!SHA256:!SHA384
TLSProtocolMin 3.1 TLSProtocolMin 3.3
TLSECName secp521r1
### Database definition (Proxy to AD) ######################################### ### Database definition (Proxy to AD) #########################################
database ldap database ldap