aboutsummaryrefslogtreecommitdiffstats
path: root/releasenotes
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2017-06-09 09:25:20 +0000
committerGerrit Code Review <review@openstack.org>2017-06-09 09:25:20 +0000
commit734f56757200613ad704b1da094b7c71b035e2ee (patch)
treeab2f68088d98d866ba22a9b2aaf00a598ad7e7b4 /releasenotes
parentb15da082b53d81cce9519040a8407dbdd6051a1a (diff)
parentc8d2a1133e8aff13acf52da2ab29e8dccda1e6b6 (diff)
Merge "Use CRL for HAProxy"
Diffstat (limited to 'releasenotes')
-rw-r--r--releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml6
1 files changed, 6 insertions, 0 deletions
diff --git a/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml b/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml
new file mode 100644
index 0000000..cdfb859
--- /dev/null
+++ b/releasenotes/notes/HAProxy-CRL-d05b555f92ff55ed.yaml
@@ -0,0 +1,6 @@
+---
+security:
+ - If the crl_file parameter is given to the ::tripleo::haproxy resource and
+ TLS is enabled in the internal network, it will configure the CRL file for
+ all the nodes it's proxying and thus properly handle revocation of the
+ server certificates.