commit fa55bd7375b3f018116c5ab7b43d0588e7ec19bd
author David Garcia <david.garcia@canonical.com> Tue Jul 07 11:14:19 2020 +0200
committer David Garcia <david.garcia@canonical.com> Fri Jul 10 13:46:50 2020 +0200
tree c1dc9e50f468402ef7a740e72aaaa9f8b0940fd0
parent 5863d3e8d8dca5108d89b993d5eb019ab16df587

Fix 1127 bug: Use config instead of resources for SSL certificates

Change-Id: I66246049e3ca48cdaa03bbc58e123a519f696acc
Signed-off-by: David Garcia <david.garcia@canonical.com>

installers/charm/ng-ui/files/default

diff --git a/installers/charm/ng-ui/files/default b/installers/charm/ng-ui/files/default
index 321435c..e014715 100644
--- a/installers/charm/ng-ui/files/default
+++ b/installers/charm/ng-ui/files/default
@@ -13,8 +13,10 @@
 #   limitations under the License.
 
 
+
 server {
-    listen       $port;
+    listen $http_port;
+    listen $https_port default ssl;
     server_name  $server_name;
     root   /usr/share/nginx/html;
     index  index.html index.htm;
@@ -22,7 +24,7 @@
     $ssl_crt
     $ssl_crt_key
     ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
-    ssl_ciphers         HIGH:!aNULL:!MD5;
+    ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
     location /osm {
         proxy_pass https://$nbi_host:$nbi_port;
         proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;