]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: allow to set ssl options and ciphers for beast frontend
authorMykola Golub <mgolub@suse.com>
Thu, 27 May 2021 16:09:48 +0000 (17:09 +0100)
committerMykola Golub <mgolub@suse.com>
Fri, 16 Jul 2021 05:34:54 +0000 (08:34 +0300)
commitaaae13d8207b2946e9638f6bdb0ac56eddf73c50
tree48de91f161312b477cc300bd4317dc99cf7e62c3
parent7d518f6b629e6292006e88108f6ca78edde2db67
rgw: allow to set ssl options and ciphers for beast frontend

Two new conf keys are added for "beast" framework:

- ssl_options: a colon separated list of ssl context options,
  documented in boost's ssl::context_base;

- ssl_ciphers: a colon separated list of ciphers, documented
  in openssl's ciphers(1) manual.

Example:

  rgw frontends = beast ...  ssl_options=default_workarounds:no_tlsv1:no_tlsv1_1 ssl_ciphers=HIGH:!aNULL:!MD5

Fixes: https://tracker.ceph.com/issues/50932
Signed-off-by: Mykola Golub <mgolub@suse.com>
(cherry picked from commit 91abede6357d167063c63eade45421d2f17bb0e7)
doc/radosgw/frontends.rst
src/rgw/rgw_asio_frontend.cc