Change Details

I think that's a fair assumption that our NDA users should be using fairly recent and secure user agents that would allow them to use our strong ciphersuite configuration instead of the mid/compat ones. Right now I've identified the following services that could be upgraded (probably this list needs to be extended): [x] tendril https://gerrit.wikimedia.org/r/c/operations/puppet/+/492329 [] icinga https://gerrit.wikimedia.org/r/492656 [x] librenms https://gerrit.wikimedia.org/r/c/operations/puppet/+/492687 [x] netbox https://gerrit.wikimedia.org/r/c/operations/puppet/+/492686

I think that's a fair assumption that our NDA users should be using fairly recent and secure user agents that would allow them to use our strong ciphersuite configuration instead of the mid/compat ones. Right now I've identified the following services that could be upgraded (probably this list needs to be extended): [x] tendril https://gerrit.wikimedia.org/r/c/operations/puppet/+/492329 [x] icinga https://gerrit.wikimedia.org/r/492656 [x] librenms https://gerrit.wikimedia.org/r/c/operations/puppet/+/492687 [x] netbox https://gerrit.wikimedia.org/r/c/operations/puppet/+/492686

I think that's a fair assumption that our NDA users should be using fairly recent and secure user agents that would allow them to use our strong ciphersuite configuration instead of the mid/compat ones. Right now I've identified the following services that could be upgraded (probably this list needs to be extended): [x] tendril https://gerrit.wikimedia.org/r/c/operations/puppet/+/492329 [x] icinga https://gerrit.wikimedia.org/r/492656 [x] librenms https://gerrit.wikimedia.org/r/c/operations/puppet/+/492687 [x] netbox https://gerrit.wikimedia.org/r/c/operations/puppet/+/492686