leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2016-05-03	migrate from obsolete SSLCertificateChainFile apache option (#8055)	Micah
	Change-Id: I20a28ae77c98071aefc1933e0ea73e5f3b895acb
2015-12-12	[bug] Use guess_apache_version in apache templates	varac
	The apache_version() fact only works if apache is already installed. So we use the guess_apache_version() function from the apache module to determine which apache version is to be installed. - Resolves: #7681
2015-11-17	[bug] [jessie] Allow apache to access webapp dir	varac
	- Resolves: #7580
2015-11-17	[feat] Query erb variables like puppet 3 needs it	varac
	- Related: #6920
2015-10-19	Redirect to webapp_domain instead of domain	guido
	This is needed for webapp when running on a subdomain.
2015-04-08	Disable passenger when pnp4nagios is being fetched, this is part of	Micah Anderson
	Change-Id: I21e9af3ef76f19924e58df5b40f4097d42fbf1cd
2015-03-30	Adds apache support for webapp.domain if defined on :80, completes fix for #6632	guido

2015-01-12	Adds apache support for webapp.domain if defined. Fixes #6632	guido
	Change-Id: If63aac60e44c4a68f030f93e20e8dc071f9df610
2014-12-22	Adds a ssl_common.inc file to use inside vhosts for the SSL config (solves ↵	guido
	#5103) Change-Id: I717bf7ca2c5679165a99370c4540f8b8dc1a48ea
2014-10-15	Disable SSLv3, and RC4 ciphers	Micah Anderson
	Change-Id: I7214aa4334e3d817dd1b6d8dce43523e3d955b5d
2014-09-25	stop logging user-agent in apache, fixes #6129	Micah Anderson
	Change-Id: I66384ae4a723be063790362f70e57228a0f1539b
2014-04-02	Update TLS apache vhost TLS configuration (#5137):	Micah Anderson
	. We want to allow for TLS1.2 to be enabled (supported in wheezy) . Explicitly disable SSLCompression. This aids in protecting against the BREACH attack: see http://breachattack.com), and SPDY version 3 is vulnerable to the CRIME attack when compression is on . Switch the cipher suites to match https://wiki.mozilla.org/Security/Server_Side_TLS#Apache for these reasons: . Prefer PFS, with ECDHE first then DHE (TLS 1.2, not many implementations support this, and there are no known attacks). . Prefer AES128 to AES256 because the key schedule in AES256 is considered weaker, and maybe AES128 is more resistant to timing attacks . Prefer AES to RC4. BEAST attacks on AES are mitigated in >=TLS1.1, and difficult in TLS1.0. They are not in RC4, and likely to become more dangerous . RC4 is on the path to removal, but still present for backward compatibility Change-Id: I99a7f0ebf2ac438f075835d1cb38f63080321043
2014-02-10	move leap_webapp.conf template to common.conf which is included by the ↵	varac
	nagios and webapp node (#5096)