)]}'
{"defaults/main.yml":[{"author":{"_account_id":25023,"name":"Jonathan Rosser","email":"jonathan.rosser@rd.bbc.co.uk","username":"jrosser"},"change_message_id":"b9f449ca8b3b7d37adb68ed406376d8652f63420","unresolved":false,"context_lines":[{"line_number":229,"context_line":"keystone_ssl_key: /etc/ssl/private/keystone.key"},{"line_number":230,"context_line":"keystone_ssl_ca_cert: /etc/ssl/certs/keystone-ca.pem"},{"line_number":231,"context_line":"keystone_ssl_protocol: \"{{ (keystone_web_server \u003d\u003d \u0027nginx\u0027) | ternary(\u0027TLSv1 TLSv1.1 TLSv1.2\u0027, \u0027ALL -SSLv2 -SSLv3\u0027) }}\""},{"line_number":232,"context_line":"keystone_ssl_cipher_suite: \"{{ ssl_cipher_suite | default(\u0027ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS\u0027) }}\""},{"line_number":233,"context_line":""},{"line_number":234,"context_line":"# if using a self-signed certificate, set this to true to regenerate it"},{"line_number":235,"context_line":"keystone_ssl_self_signed_regen: false"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_b149eeb8","line":232,"range":{"start_line":232,"start_character":0,"end_line":232,"end_character":25},"updated":"2018-09-18 09:47:52.000000000","message":"the syntax of the cipher suites also differs between apache/nginx, see https://cipherli.st/ for (too?) strict examples","commit_id":"7c5dc2b34c097064b8ca9a9bbc70b2aec2449f8d"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"cc580700f178d45aacb8c0ba806dc5b75e3b1044","unresolved":false,"context_lines":[{"line_number":229,"context_line":"keystone_ssl_key: /etc/ssl/private/keystone.key"},{"line_number":230,"context_line":"keystone_ssl_ca_cert: /etc/ssl/certs/keystone-ca.pem"},{"line_number":231,"context_line":"keystone_ssl_protocol: \"{{ (keystone_web_server \u003d\u003d \u0027nginx\u0027) | ternary(\u0027TLSv1 TLSv1.1 TLSv1.2\u0027, \u0027ALL -SSLv2 -SSLv3\u0027) }}\""},{"line_number":232,"context_line":"keystone_ssl_cipher_suite: \"{{ ssl_cipher_suite | default(\u0027ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS\u0027) }}\""},{"line_number":233,"context_line":""},{"line_number":234,"context_line":"# if using a self-signed certificate, set this to true to regenerate it"},{"line_number":235,"context_line":"keystone_ssl_self_signed_regen: false"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3f79a3b5_911dd274","line":232,"range":{"start_line":232,"start_character":0,"end_line":232,"end_character":25},"in_reply_to":"3f79a3b5_b149eeb8","updated":"2018-09-18 09:53:21.000000000","message":"Ah, good call. It would seem, then that we need another patch to master to address that! Would you mind putting that together?","commit_id":"7c5dc2b34c097064b8ca9a9bbc70b2aec2449f8d"}]}