Dustin C. Hatch
909c8e7a03
Debian does not support system-wide SSL cipher suite profiles of course, so these options need to be specified explicitly when deploying HAProxy on Debian-based machines.
3 lines
179 B
YAML
3 lines
179 B
YAML
haproxy_ssl_default_bind_options: no-sslv3
|
|
haproxy_default_ssl_default_ciphers: ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
|