openstack
/
puppet-tripleo
Code Issues Proposed changes
RETIRED, Lightweight composition layer for Puppet TripleO
1,975 Commits 3 Branches 39 Tags 63 MiB
Go to file
Damien Ciabrini 1c46f6e1cd Disallow SSLv2, SSLv3 and TLS1.0 in mysql for FedRAMP compliance 
We cannot disable a specific protocol when using SSL in mysql, so in order to
enforce TLS1.1 or greater, we disallow all ciphers provided by SSLv2 SSLv3 and
TLS1.0.

Galera group communication cannot be configured with a list of available
ciphers, so configure gcomm to use AES128-SHA256, which seems to be the closest
from the default AES128-SHA.

Inherit the cipher list settings for the rsync SST.

Change-Id: Ib3625020e60665f91b9009e7f06b9b25a6970a9b
 		2018-04-27 12:37:07 -04:00
doc Follow the new PTI for document build 2018-02-28 14:42:12 +08:00
files Add support for libvirt VNC TLS with option of a dedicated CA 2018-02-14 10:23:26 +00:00
lib Merge "Add fact to get array of nic alias name" 2018-03-28 21:19:55 +00:00
manifests Disallow SSLv2, SSLv3 and TLS1.0 in mysql for FedRAMP compliance 2018-04-27 12:37:07 -04:00
releasenotes Fixes binding type for OpenDaylight Websocket 2018-04-17 10:51:03 -04:00
spec Fluentd monitoring interface 2018-04-17 15:15:12 +02:00
templates Force stunnel to use TLSv1.2 2018-04-19 13:31:46 +00:00
zuul.d Zuul: Remove project name 2018-01-31 16:51:36 -08:00
.gitignore Update gitignore not to exclude fixture hieradata 2017-05-17 14:45:35 -06:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Load puppet-openstack_spec_helper locally during tests 2018-02-12 10:53:40 +08:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras Pin puppet-collectd 2018-03-19 17:18:16 +01:00
README.md Update the doc link 2017-12-16 02:49:05 +00:00
Rakefile Composable HA 2017-01-25 19:32:31 +00:00
bindep.txt Add Puppet package to bindep, for module build 2017-10-27 13:50:15 -07:00
metadata.json metadata.json: prepare for 9.0.0 release (rocky-m1) 2018-04-11 09:50:46 -07:00
setup.cfg Fixes license to explicitly be Apache 2.0 2017-10-09 11:06:29 -04:00
setup.py chmod +x setup.py 2017-10-06 12:28:56 -07:00
tox.ini Follow the new PTI for document build 2018-02-28 14:42:12 +08:00

README.md

Team and repository tags

Team and repository tags

puppet-tripleo

Lightweight composition layer for Puppet TripleO.

Contributing