Commit 55d7abb0 authored by Marin Jankovski's avatar Marin Jankovski

Fix the tests, use new ciphers for nginx.

parent e59ae3e5
......@@ -68,6 +68,7 @@ describe "gitlab::install" do
"sync_ssh_keys"=>false,
"sync_time"=>3600
},
ldap_servers: {},
backup: {
"enable"=>true,
"cron"=>{
......@@ -548,6 +549,7 @@ describe "gitlab::install" do
"sync_ssh_keys"=>false,
"sync_time"=>3600
},
ldap_servers: {},
backup: {
"enable"=>true,
"cron"=>{
......
......@@ -53,7 +53,8 @@ server {
ssl on;
ssl_certificate <%= @ssl_certificate_path %>/<%= @host %>.crt;
ssl_certificate_key <%= @ssl_certificate_key_path %>/<%= @host %>.key;
ssl_ciphers 'AES256+EECDH:AES256+EDH';
ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_session_cache builtin:1000 shared:SSL:10m;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment