OpenStack Cinder Charm

  1. Bug #1851673
  2. Comment #1

Comment 1 for bug 1851673

Revision history for this message
James Page (james-page) wrote : Re: cipher

The charms should do sane things by default:

    SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
    SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!EXP:!LOW:!MEDIUM

and be opinionated about what is secure based on recognised security standards.

So I'd prefer not to have an config option here but to review our default baseline for SSL TLS termination and update if need be.