Include ssl.conf in httpd configuration - #969
Conversation
The ssl.conf rendered by lib-common was placed by kolla into conf.d/ but never loaded. This left global SSL hardening settings (cipher suite, protocol restrictions, session cache) at mod_ssl defaults instead of the operator-managed values. Add an explicit Include of conf.d/ssl.conf alongside the existing wsgi/proxypass conditional includes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Francesco Pantano <fpantano@redhat.com>
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: fmount The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post ❌ openstack-k8s-operators-content-provider FAILURE in 15m 06s |
1 participant
The
ssl.confrendered bylib-commonwas placed bykollaintoconf.d/but never loaded because the Includeconf.d/*.confdirective was commented out. This left globalSSLhardening settings (cipher suite, protocol restrictions, session cache) atmod_ssldefaults instead of the operator-managed values.