Commit graph

7 commits

Author SHA1 Message Date
Paul.W Harvey
e891d5c43b Generate stronger p12_export_password (#654) (#657)
This buys us an extra 16bits of password guessing entropy by expanding the characterset from hex to [a-zA-Z0-9_@]
2017-09-29 16:04:45 +02:00
Paul.W Harvey
dd43e1e47e Use openssl to generate better quality p12_export_password (#655)
We're already doing it this way for CA_password, and ansible's to_uuid is problematic as it uses uuid v5 under the hood (#654)
2017-08-29 08:32:12 -05:00
Jack Ivanov
d10a86b331 Revert "define local_dns if dns tag used (#531)" (#532)
This reverts commit 627b7d5d9b.
2017-05-08 22:12:49 +02:00
Jack Ivanov
627b7d5d9b define local_dns if dns tag used (#531) 2017-05-08 16:10:59 -04:00
Jack Ivanov
451394100d Some enhances in the compat ciphers (#464)
raise the IntegrityCheckMethod to SHA384

Move Windows to ECDSA

Increase IntegrityCheckMethod
2017-04-23 16:00:37 -04:00
Jack Ivanov
a7b06058cb remove the proxy role #440 (#457)
* remove the proxy role #440

* Separate facts. Make roles more independent from each other

move openssl to local tasks

move unneeded tasks
2017-04-20 18:00:17 -04:00
Jack Ivanov
6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
2017-03-18 12:22:07 +03:00