diff --git a/roles/ldap_server/defaults/main.yml b/roles/ldap_server/defaults/main.yml index 465ea9fb8fc35da661c87eaa22af6685ca0c58fd..bc5466ba468b2ec8bf3add2e2b6bee44de7b7878 100644 --- a/roles/ldap_server/defaults/main.yml +++ b/roles/ldap_server/defaults/main.yml @@ -31,5 +31,20 @@ ldap_permissions: by users read by * none -ldap_tls_ciphers: "NONE:+VERS-TLS1.2:+CTYPE-X509:+COMP-NULL:+SIGN-RSA-SHA256:+SIGN-RSA-SHA384:\ -+SIGN-RSA-SHA512:+DHE-RSA:+ECDHE-RSA:+SHA256:+SHA384:+AEAD:+AES-128-GCM:+AES-128-CBC:+AES-256-GCM:+AES-256-CBC:+CURVE-ALL" +ldap_tls_ciphers: "NONE:\ ++VERS-TLS1.2:\ ++CTYPE-X509:\ ++COMP-NULL:\ ++SIGN-RSA-SHA256:\ ++SIGN-RSA-SHA384:\ ++SIGN-RSA-SHA512:\ ++DHE-RSA:\ ++ECDHE-RSA:\ ++SHA256:\ ++SHA384:\ ++SHA512:\ ++AEAD:\ ++AES-128-GCM:\ ++AES-256-GCM:\ ++CHACHA20-POLY1305:\ ++CURVE-ALL"