freeipa/install/updates/20-sslciphers.update

# change configured ciphers
# the result of this update will be that default ciphers
# provided by DS which are not weak will be enabled
dn: cn=encryption,cn=config
only:nsSSL3Ciphers: default
addifnew:allowWeakCipher: off
Update SSL ciphers configured in 389-ds-base use configuration parameters to enable ciphers provided by NSS and not considered weak. This requires 389-ds version 1.3.3.2 or later https://fedorahosted.org/freeipa/ticket/4395 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com> 2014-09-12 05:43:31 -05:00			`# change configured ciphers`
Configure 389ds with "default" cipher suite nsSSLCiphers: "default" provides only secure ciphers that should be used when connecting to DS https://fedorahosted.org/freeipa/ticket/5684 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> 2016-03-03 10:39:34 -06:00			`# the result of this update will be that default ciphers`
			`# provided by DS which are not weak will be enabled`
Update SSL ciphers configured in 389-ds-base use configuration parameters to enable ciphers provided by NSS and not considered weak. This requires 389-ds version 1.3.3.2 or later https://fedorahosted.org/freeipa/ticket/4395 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com> 2014-09-12 05:43:31 -05:00			`dn: cn=encryption,cn=config`
Configure 389ds with "default" cipher suite nsSSLCiphers: "default" provides only secure ciphers that should be used when connecting to DS https://fedorahosted.org/freeipa/ticket/5684 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> 2016-03-03 10:39:34 -06:00			`only:nsSSL3Ciphers: default`
Update SSL ciphers configured in 389-ds-base use configuration parameters to enable ciphers provided by NSS and not considered weak. This requires 389-ds version 1.3.3.2 or later https://fedorahosted.org/freeipa/ticket/4395 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com> 2014-09-12 05:43:31 -05:00			`addifnew:allowWeakCipher: off`