HomePhabricator

ssl_ciphersuite: standardize STS preload
e57c7f98af73Unpublished

Authored by BBlack on Jun 6 2016, 2:10 PM.

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

ssl_ciphersuite: standardize STS preload

Now that wikimedia.org can preload, switch the HSTS argument to a
boolean that always sets our standard 1y/includeSub/preload STS
string. The default/false leaves out HSTS completely, leaving it
up to manual config to set any HSTS, in case of e.g. labs-based
services which are outside the scope of our canonical
domains/policies.

Bug: T132685
Change-Id: I271336e264b01d7a352577dcc5afa0b4ca2be31f

Details

Committed
BBlackJun 6 2016, 2:53 PM
Parents
rOPUPf29ef74102b0: fix ferm port 80 for californium/gallium
Branches
Unknown
Tags
Unknown
References
refs/changes/29/292929/4
ChangeId
I271336e264b01d7a352577dcc5afa0b4ca2be31f