mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-11 08:41:55 -06:00
f66160fdc9
Fixes: https://pagure.io/freeipa/issue/9299 Signed-off-by: Shmarya Rubenstein <github@shmarya.net> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
30 lines
715 B
Python
30 lines
715 B
Python
#
|
|
# Copyright (C) 2022 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
'''
|
|
This module contains default nixos-specific implementations of system tasks.
|
|
'''
|
|
|
|
from __future__ import absolute_import
|
|
|
|
from ipapython import directivesetter
|
|
from ipaplatform.redhat.tasks import RedHatTaskNamespace
|
|
from ipaplatform.paths import paths
|
|
|
|
|
|
class NixosTaskNamespace(RedHatTaskNamespace):
|
|
|
|
def configure_httpd_protocol(self):
|
|
# On nixos 31 and earlier DEFAULT crypto-policy has TLS 1.0 and 1.1
|
|
# enabled.
|
|
directivesetter.set_directive(
|
|
paths.HTTPD_SSL_CONF,
|
|
'SSLProtocol',
|
|
"all -SSLv3 -TLSv1 -TLSv1.1",
|
|
False
|
|
)
|
|
|
|
|
|
tasks = NixosTaskNamespace()
|