From 562ebef08c5d68cac963c8ec8e0d6d142c0cead5 Mon Sep 17 00:00:00 2001 From: Francesco Pantano Date: Sat, 1 Aug 2026 17:22:21 +0200 Subject: [PATCH] Include ssl.conf in httpd configuration The ssl.conf rendered by lib-common was placed by kolla into conf.d/ but never loaded. This left global SSL hardening settings (cipher suite, protocol restrictions, session cache) at mod_ssl defaults instead of the operator-managed values. Add an explicit Include of conf.d/ssl.conf alongside the existing wsgi/proxypass conditional includes. Co-Authored-By: Claude Opus 4.6 Signed-off-by: Francesco Pantano --- templates/common/config/httpd.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/common/config/httpd.conf b/templates/common/config/httpd.conf index a82c55165..95217c1b9 100644 --- a/templates/common/config/httpd.conf +++ b/templates/common/config/httpd.conf @@ -21,6 +21,7 @@ CustomLog /dev/stdout combined env=!forwarded CustomLog /dev/stdout proxy env=forwarded ErrorLog /dev/stdout +Include conf.d/ssl.conf {{ if .Wsgi }} Include conf.d/10-glance-wsgi.conf {{ else }}