umbau 1.3.12

2026-09-03 08:42:04 +02:00
parent 2741910a72
commit b2c72de069
4 changed files with 201 additions and 110 deletions
--- a/ansible/roles/guacd/templates/openssl-guacd.cnf.j2
+++ b/ansible/roles/guacd/templates/openssl-guacd.cnf.j2
@ -33,6 +33,9 @@ system_default = system_default_sect

 [system_default_sect]
 MinProtocol = {{ guacd_tls_min_protocol }}
+{% if guacd_tls_max_protocol | default('', true) | length > 0 %}
+MaxProtocol = {{ guacd_tls_max_protocol }}
+{% endif %}
 CipherString = DEFAULT@SECLEVEL={{ guacd_tls_security_level }}
 {% if guacd_tls_unsafe_legacy_renegotiation %}
 # Manche aeltere Windows-/SCHANNEL-Staende koennen die in OpenSSL 3