diff options
| author | Bertrand Jacquin <bertrand@jacquin.bzh> | 2019-08-20 23:46:52 +0100 |
|---|---|---|
| committer | Bertrand Jacquin <bertrand@jacquin.bzh> | 2019-08-21 01:05:32 +0100 |
| commit | 936c73cc4eebe5f7027501f60a64812ee3d9d220 (patch) | |
| tree | 8d937368e5aa0a8bd02e0fd362188ce3a5ef0cf5 /factory-default | |
| parent | factory-default: Refresh app-admin/syslog-ng config (diff) | |
| download | portage-936c73cc4eebe5f7027501f60a64812ee3d9d220.tar.xz | |
factory: Harden app-admin/syslog-ng config
Diffstat (limited to 'factory-default')
| -rw-r--r-- | factory-default/app-admin/syslog-ng/etc/syslog-ng/conf.d/0001-send-via-syslog.conf | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/factory-default/app-admin/syslog-ng/etc/syslog-ng/conf.d/0001-send-via-syslog.conf b/factory-default/app-admin/syslog-ng/etc/syslog-ng/conf.d/0001-send-via-syslog.conf index 69ee5484..1ba63a13 100644 --- a/factory-default/app-admin/syslog-ng/etc/syslog-ng/conf.d/0001-send-via-syslog.conf +++ b/factory-default/app-admin/syslog-ng/etc/syslog-ng/conf.d/0001-send-via-syslog.conf @@ -4,8 +4,9 @@ destination d_log.pants-on.net { tls(ca_dir("/etc/ssl/certs") peer_verify(required-trusted) ssl-options(no-sslv2, no-sslv3, no-tlsv1, no-tlsv11) - ecdh-curve-list("prime256v1:secp384r1") + ecdh-curve-list("prime256v1:secp384r1:secp521r1") cipher-suite("ECDHE-RSA-AES256-GCM-SHA384") + allow-compress(no) ) ); }; |