openstack-ansible-haproxy_s.../releasenotes/notes/tls12-only-a22d5f3f8198617f.yaml
Matthew Thode 547d7f91be
Force force-tlsv12 only
Secure by default

Change-Id: I70007af94bfd5e482662ab72d25bf090cf5d0834
2018-12-13 14:20:37 -06:00

8 lines
263 B
YAML

---
security:
- |
The default TLS version has been set to force-tlsv12. This only allows
version 1.2 of the protocol to be used when terminating or creating TLS
connections. You can change the value with the haproxy_ssl_bind_options
variable.