You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- name: Ensure OCSP configuration is set to Leafansible.builtin.lineinfile:
path: /etc/httpd/conf.d/ssl.confregexp: '^\s*#?\s*SSLOCSPEnable\s+.*$'line: SSLOCSPEnable leafnotify: Restart IPA
- name: Ensure SSLProtocol excludes SSLv3, TLSv1, TLSv1.1, TLSv1.3ansible.builtin.lineinfile:
path: /etc/httpd/conf.d/ssl.confregexp: '^\s*#?\s*SSLProtocol\s+.*$'line: 'SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.3'backrefs: yesnotify: Restart IPA
The text was updated successfully, but these errors were encountered:
EmptyByte
changed the title
[ipasmartcard_server] Role to setup Smart card on IPA server should include tuning of SSLOCSPEnable and SSLProtocol
[ipasmartcard_server] Role should include configuration of SSLOCSPEnable and SSLProtocol in ssl.conf
Jun 22, 2024
EmptyByte
changed the title
[ipasmartcard_server] Role should include configuration of SSLOCSPEnable and SSLProtocol in ssl.conf
[ipasmartcard_server] Role does not include configuration of SSLOCSPEnable and SSLProtocol in ssl.conf
Jun 22, 2024
The role to setup smartcard authentication should provide the ability to tune the
SSLOCSPEnable
option andSSLProtocol
on server:Refer to the following links for more information:
Accessing the IPA Web UI in a Web Browser - Red Hat Enterprise Linux 9
Bugzilla Report - Bug 1775158
Getting IPA error when TLS v1.3 is enabled
The text was updated successfully, but these errors were encountered: