ansible/xoxys.ldap_proxy
1
0
Fork 0
Code Issues Pull Requests Releases Activity

fix: enable ECDHE ciphers and enforce TLS 1.2 #2

Merged
xoxys merged 1 commits from xoxys-patch-1 into main 2024-06-04 21:12:37 +02:00
Conversation 0 Commits 1 Files Changed 1 +3 -2
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
templates/etc/openldap/slapd.conf.j2
View File

@ -31,8 +31,9 @@ argsfile /var/run/openldap/slapd.args
TLSCertificateFile {{ ldap_proxy_tls_cert_path }}
TLSCertificateKeyFile {{ ldap_proxy_tls_key_path }}
TLSCACertificateFile {{ ldap_proxy_tls_ca_path }}
TLSCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
TLSProtocolMin 3.1
TLSCipherSuite HIGH:MEDIUM:-SSLv2:-SSLv3:!SHA1:!SHA256:!SHA384
TLSProtocolMin 3.3
TLSECName secp521r1
### Database definition (Proxy to AD) #########################################
database ldap