Skip to content

Commit

Permalink
chore(update-ssl-cipher-script): Added initial script for updating ss…
Browse files Browse the repository at this point in the history
…l cipher (#1678)

Co-authored-by: Edward Malinowski <edwardmalinowski@Edwards-MacBook-Pro.local.cdis>
  • Loading branch information
emalinowski and Edward Malinowski authored Aug 3, 2021
1 parent db86434 commit 82d2bf0
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions files/scripts/revproxy-cipher-updater.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
# Get the revproxy ELB name
elbName=$(kubectl get services | grep revproxy-service-elb | rev | cut -d '.' -f 5 | cut -d ' ' -f 1 | rev | cut -d '-' -f 1)
# Create a custom ELB policy for the load balancer
aws elb create-load-balancer-policy --load-balancer-name $elbName --policy-name customPolicy --policy-type-name SSLNegotiationPolicyType --policy-attributes AttributeName=Protocol-TLSv1.2,AttributeValue=true AttributeName=ECDHE-RSA-AES256-GCM-SHA384,AttributeValue=true AttributeName=ECDHE-RSA-AES128-GCM-SHA256,AttributeValue=true AttributeName=Server-Defined-Cipher-Order,AttributeValue=true
# Update the policy to the new custom one
aws elb set-load-balancer-policies-of-listener --load-balancer-name $elbName --load-balancer-port 443 --policy-names customPolicy

0 comments on commit 82d2bf0

Please sign in to comment.