From c2b9d04ecef5babc028728d4426aab9237b5ce86 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Tue, 27 Oct 2015 16:26:24 +0100 Subject: stunnel: disable compression. --- roles/IMAP-proxy/files/etc/stunnel/roundcube.conf | 2 ++ roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 | 2 ++ roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 | 2 ++ roles/common/templates/etc/stunnel/bacula-fd.conf.j2 | 2 ++ roles/common/templates/etc/stunnel/munin-node.conf.j2 | 2 ++ roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 | 2 ++ roles/webmail/templates/etc/stunnel/postfix.conf.j2 | 2 ++ 7 files changed, 14 insertions(+) diff --git a/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf b/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf index 307a5c2..284bcc0 100644 --- a/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf +++ b/roles/IMAP-proxy/files/etc/stunnel/roundcube.conf @@ -35,6 +35,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 index e678e47..4dbb1db 100644 --- a/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 +++ b/roles/bacula-dir/templates/etc/stunnel/bacula-dir.conf.j2 @@ -35,6 +35,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 b/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 index e137536..767424a 100644 --- a/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 +++ b/roles/bacula-sd/templates/etc/stunnel/bacula-sd.conf.j2 @@ -33,6 +33,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/common/templates/etc/stunnel/bacula-fd.conf.j2 b/roles/common/templates/etc/stunnel/bacula-fd.conf.j2 index d9fe04b..ed819c0 100644 --- a/roles/common/templates/etc/stunnel/bacula-fd.conf.j2 +++ b/roles/common/templates/etc/stunnel/bacula-fd.conf.j2 @@ -33,6 +33,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/common/templates/etc/stunnel/munin-node.conf.j2 b/roles/common/templates/etc/stunnel/munin-node.conf.j2 index e4188fc..83614b5 100644 --- a/roles/common/templates/etc/stunnel/munin-node.conf.j2 +++ b/roles/common/templates/etc/stunnel/munin-node.conf.j2 @@ -33,6 +33,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 b/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 index 51c5dca..bbe4114 100644 --- a/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 +++ b/roles/munin-master/templates/etc/stunnel/munin-master.conf.j2 @@ -35,6 +35,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE diff --git a/roles/webmail/templates/etc/stunnel/postfix.conf.j2 b/roles/webmail/templates/etc/stunnel/postfix.conf.j2 index 722497a..9003686 100644 --- a/roles/webmail/templates/etc/stunnel/postfix.conf.j2 +++ b/roles/webmail/templates/etc/stunnel/postfix.conf.j2 @@ -35,6 +35,8 @@ options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 +options = NO_COMPRESSION + ; These options provide additional security at some performance degradation options = SINGLE_ECDH_USE options = SINGLE_DH_USE -- cgit v1.2.3