30 lines
715 B
Python
30 lines
715 B
Python
#
|
|
# Copyright (C) 2022 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
'''
|
|
This module contains default nixos-specific implementations of system tasks.
|
|
'''
|
|
|
|
from __future__ import absolute_import
|
|
|
|
from ipapython import directivesetter
|
|
from ipaplatform.redhat.tasks import RedHatTaskNamespace
|
|
from ipaplatform.paths import paths
|
|
|
|
|
|
class NixosTaskNamespace(RedHatTaskNamespace):
|
|
|
|
def configure_httpd_protocol(self):
|
|
# On nixos 31 and earlier DEFAULT crypto-policy has TLS 1.0 and 1.1
|
|
# enabled.
|
|
directivesetter.set_directive(
|
|
paths.HTTPD_SSL_CONF,
|
|
'SSLProtocol',
|
|
"all -SSLv3 -TLSv1 -TLSv1.1",
|
|
False
|
|
)
|
|
|
|
|
|
tasks = NixosTaskNamespace()
|