lp://qastaging/~danilo/charm-haproxy/ssl-default-bind-options

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://qastaging/charm-haproxy at revision 105

Free Ekanayaka (community): Approve on 2016-09-20

Adam Collard (community): Approve on 2016-09-19

Diff: 77 lines (+45/-0)

3 files modified

config.yaml (+6/-0)
hooks/hooks.py (+3/-0)
hooks/tests/test_helpers.py (+36/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

105. By Данило Шеган on 2016-09-16

Introduce global_default_bind_options config option to allow disabling/forcing SSL protocols.

104. By Cory Johns on 2016-07-21

[jamesj,r=johnsca] Add support for Xenial

103. By Cory Johns on 2016-04-07

[verterok] Add statistics relation

102. By Adam Israel on 2016-03-04

[samantha-jian] Add liberty support

101. By Adam Israel on 2016-03-03

[aisrael] Fix lint error

100. By Marco Ceppi on 2016-01-09

New icon

99. By Kevin W Monroe on 2015-11-19

[verterok, r=admcleod, a=kwmonroe] restart rsyslog if haproxy config changes; minor updates to tests

98. By Chris Glass on 2015-10-21

Merge lp:~tribaal/charms/trusty/haproxy/longer-openssl-selfsigned [a=tribaal] [r=dpb]

Make the self-signed SSL certificate last for 3650 days instead of the default of 30 days.
This mirrors what the apache charm does.

97. By Chris Glass on 2015-08-18

Merge lp:~free.ekanayaka/charms/trusty/haproxy/no-sslv3 [a=free.ekanayaka] [r=tribaal]

Disable SSL v3 to prevent POODLE attacks when SSL is enabled.

96. By Chris Glass on 2015-08-18

Merge lp:~free.ekanayaka/charms/trusty/haproxy/ciphers-support [a=free.ekanayaka] [r=tribaal]

Add a config option to specify what ciphers to use when SSL is enabled.
Default to a sane selection of ciphers, in particular disallowing RC4 and null encryption.