diff --git a/docs/itential_platform_guide.md b/docs/itential_platform_guide.md index fc61461..aaead27 100644 --- a/docs/itential_platform_guide.md +++ b/docs/itential_platform_guide.md @@ -222,7 +222,7 @@ located in `roles/platform/defaults/main/webserver.yml`. | platform_webserver_https_key | String | The path to the public key file used for HTTPS connections. | `/opt/itential/platform/keys/key.pem` | | platform_webserver_https_passphrase | String | The passphrase for the private key used to enable TLS sessions. | | | platform_webserver_https_cert | String | The path to the certificate file used for HTTPS connections. | `/opt/itential/platform/keys/cert.pem` | -| platform_webserver_https_secure_protocol | String | The set of allowed SSL/TLS protocol versions. | `TLSv1_2_method` | +| platform_webserver_https_secure_protocol | String | The set of allowed SSL/TLS protocol versions. | `TLS_method` | | platform_webserver_https_ciphers | String | The allowed SSL/TLS cipher suite. | `ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!SRP:!CAMELLIA` | | platform_webserver_https_client_reneg_limit | Integer | Specifies the number of renegotiations that are allowed in a single HTTPS connection. | 3 | | platform_webserver_https_client_reneg_window | Integer | Specifies the time renegotiation window in seconds for a single HTTPS connection. | 600 | diff --git a/roles/platform/defaults/main/webserver.yml b/roles/platform/defaults/main/webserver.yml index 1f4da30..9144e03 100644 --- a/roles/platform/defaults/main/webserver.yml +++ b/roles/platform/defaults/main/webserver.yml @@ -32,7 +32,7 @@ platform_webserver_https_passphrase: platform_webserver_https_cert: "{{ platform_tls_dir }}/certs/server.crt" # The set of allowed SSL/TLS protocol versions. -platform_webserver_https_secure_protocol: TLSv1_2_method +platform_webserver_https_secure_protocol: TLS_method # The allowed SSL/TLS cipher suite. platform_webserver_https_ciphers: "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!SRP:!CAMELLIA" # noqa line-length yaml[line-length]