freeipa/install/updates/20-sslciphers.update

# change configured ciphers
# the result of this update will be that all ciphers
# provided by NSS which ar not weak will be enabled
dn: cn=encryption,cn=config
only:nsSSL3Ciphers: +all
addifnew:allowWeakCipher: off
Update SSL ciphers configured in 389-ds-base use configuration parameters to enable ciphers provided by NSS and not considered weak. This requires 389-ds version 1.3.3.2 or later https://fedorahosted.org/freeipa/ticket/4395 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com> 2014-09-12 05:43:31 -05:00			`# change configured ciphers`
			`# the result of this update will be that all ciphers`
			`# provided by NSS which ar not weak will be enabled`
			`dn: cn=encryption,cn=config`
			`only:nsSSL3Ciphers: +all`
			`addifnew:allowWeakCipher: off`