diff options
| author |   Jenkins <jenkins@review.openstack.org> | 2017-06-09 09:25:20 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <review@openstack.org> | 2017-06-09 09:25:20 +0000 |
| commit | 734f56757200613ad704b1da094b7c71b035e2ee (patch) | |
| tree | ab2f68088d98d866ba22a9b2aaf00a598ad7e7b4 /releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml | |
| parent | b15da082b53d81cce9519040a8407dbdd6051a1a (diff) | |
| parent | c8d2a1133e8aff13acf52da2ab29e8dccda1e6b6 (diff) | |
Merge "Use CRL for HAProxy"
Diffstat (limited to 'releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml')
| -rw-r--r-- | releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml b/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml new file mode 100644 index 0000000..cdfb859 --- /dev/null +++ b/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml @@ -0,0 +1,6 @@ +--- +security: + - If the crl_file parameter is given to the ::tripleo::haproxy resource and + TLS is enabled in the internal network, it will configure the CRL file for + all the nodes it's proxying and thus properly handle revocation of the + server certificates. |