diff --git a/api/go.mod b/api/go.mod
index 38c3236b7..182c65598 100644
--- a/api/go.mod
+++ b/api/go.mod
@@ -5,7 +5,7 @@ go 1.24.4
require (
github.com/google/go-cmp v0.7.0
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6
- github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981
+ github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587
github.com/robfig/cron/v3 v3.0.1
k8s.io/api v0.31.14
k8s.io/apimachinery v0.31.14
diff --git a/api/go.sum b/api/go.sum
index 49e6f63ae..f938bfd46 100644
--- a/api/go.sum
+++ b/api/go.sum
@@ -74,14 +74,14 @@ github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFd
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.28.1 h1:S4hj+HbZp40fNKuLUQOYLDgZLwNUVn19N3Atb98NCyI=
-github.com/onsi/ginkgo/v2 v2.28.1/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
-github.com/onsi/gomega v1.39.1 h1:1IJLAad4zjPn2PsnhH70V4DKRFlrCzGBNrNaru+Vf28=
-github.com/onsi/gomega v1.39.1/go.mod h1:hL6yVALoTOxeWudERyfppUcZXjMwIMLnuSfruD2lcfg=
+github.com/onsi/ginkgo/v2 v2.28.2 h1:DTrMfpqxiNUyQ3Y0zhn1n3cOO2euFgQPYIpkWwxVFps=
+github.com/onsi/ginkgo/v2 v2.28.2/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
+github.com/onsi/gomega v1.41.0 h1:OwKp4pXNgVxf6sCplzYo794OFNuoL2q2SBMU5NSWOjA=
+github.com/onsi/gomega v1.41.0/go.mod h1:M/Uqpu/8qTjtzCLUA2zJHX9Iilrau25x1PdoSRbWh5A=
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6 h1:117Gu9HCSu2tAp579WnCJ9QtnslH2qnPB8UFvn8ZpqE=
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6/go.mod h1:i7l8cihvFktd/LSuyvL2z6OcwauarQGoVhDMePL4VyI=
-github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981 h1:v1viH0gmNb+AXMg/0GxDcj8VUTdjVLotfOIGrNyMxHk=
-github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981/go.mod h1:I/VBXZLdjk8DUGsEbB+Ha72JBFYYntP7Pm2FpEto9K8=
+github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587 h1:p03uEXoSreyu7LpFmb9YyYM8tEx2D2+7qqhLXNWHTq0=
+github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587/go.mod h1:JC04T5G4E/he5ukonV1oCqa0QzFkLv761VbLruVghJM=
github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
@@ -113,8 +113,8 @@ go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
-go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
-go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.uber.org/zap v1.28.0 h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo=
+go.uber.org/zap v1.28.0/go.mod h1:rDLpOi171uODNm/mxFcuYWxDsqWSAVkFdX4XojSKg/Q=
go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
diff --git a/go.mod b/go.mod
index e623513e9..e25e40bc2 100644
--- a/go.mod
+++ b/go.mod
@@ -8,16 +8,16 @@ require (
github.com/google/uuid v1.6.0
github.com/gophercloud/gophercloud/v2 v2.8.0
github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.7.7
- github.com/onsi/ginkgo/v2 v2.28.1
- github.com/onsi/gomega v1.39.1
+ github.com/onsi/ginkgo/v2 v2.28.2
+ github.com/onsi/gomega v1.41.0
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6
github.com/openstack-k8s-operators/keystone-operator/api v0.6.1-0.20260420052838-77f94aef5af2
- github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981
+ github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587
github.com/openstack-k8s-operators/lib-common/modules/openstack v0.6.1-0.20260417092244-81c71b39e981
github.com/openstack-k8s-operators/lib-common/modules/test v0.6.1-0.20260417092244-81c71b39e981
github.com/openstack-k8s-operators/mariadb-operator/api v0.6.1-0.20260413152655-564a51226a2a
github.com/openstack-k8s-operators/nova-operator/api v0.0.0-20221209164002-f9e6b9363961
- go.uber.org/zap v1.27.1
+ go.uber.org/zap v1.28.0
golang.org/x/exp v0.0.0-20241217172543-b2144cdd0a67
gopkg.in/ini.v1 v1.67.0
gopkg.in/yaml.v3 v3.0.1
diff --git a/go.sum b/go.sum
index 7cf957d9d..1291d77ca 100644
--- a/go.sum
+++ b/go.sum
@@ -112,18 +112,18 @@ github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFd
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.28.1 h1:S4hj+HbZp40fNKuLUQOYLDgZLwNUVn19N3Atb98NCyI=
-github.com/onsi/ginkgo/v2 v2.28.1/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
-github.com/onsi/gomega v1.39.1 h1:1IJLAad4zjPn2PsnhH70V4DKRFlrCzGBNrNaru+Vf28=
-github.com/onsi/gomega v1.39.1/go.mod h1:hL6yVALoTOxeWudERyfppUcZXjMwIMLnuSfruD2lcfg=
+github.com/onsi/ginkgo/v2 v2.28.2 h1:DTrMfpqxiNUyQ3Y0zhn1n3cOO2euFgQPYIpkWwxVFps=
+github.com/onsi/ginkgo/v2 v2.28.2/go.mod h1:CLtbVInNckU3/+gC8LzkGUb9oF+e8W8TdUsxPwvdOgE=
+github.com/onsi/gomega v1.41.0 h1:OwKp4pXNgVxf6sCplzYo794OFNuoL2q2SBMU5NSWOjA=
+github.com/onsi/gomega v1.41.0/go.mod h1:M/Uqpu/8qTjtzCLUA2zJHX9Iilrau25x1PdoSRbWh5A=
github.com/openshift/api v0.0.0-20250711200046-c86d80652a9e h1:E1OdwSpqWuDPCedyUt0GEdoAE+r5TXy7YS21yNEo+2U=
github.com/openshift/api v0.0.0-20250711200046-c86d80652a9e/go.mod h1:Shkl4HanLwDiiBzakv+con/aMGnVE2MAGvoKp5oyYUo=
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6 h1:117Gu9HCSu2tAp579WnCJ9QtnslH2qnPB8UFvn8ZpqE=
github.com/openstack-k8s-operators/infra-operator/apis v0.6.1-0.20260416122644-5476763a36b6/go.mod h1:i7l8cihvFktd/LSuyvL2z6OcwauarQGoVhDMePL4VyI=
github.com/openstack-k8s-operators/keystone-operator/api v0.6.1-0.20260420052838-77f94aef5af2 h1:h7pTz90cHqX6nTYjYDphuitIfD4UpM9yGnI3AbLdHrY=
github.com/openstack-k8s-operators/keystone-operator/api v0.6.1-0.20260420052838-77f94aef5af2/go.mod h1:SpO4CL7c5/1HG+61fP6kWhL2+3aqR+5SNatdZueKrz8=
-github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981 h1:v1viH0gmNb+AXMg/0GxDcj8VUTdjVLotfOIGrNyMxHk=
-github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260417092244-81c71b39e981/go.mod h1:I/VBXZLdjk8DUGsEbB+Ha72JBFYYntP7Pm2FpEto9K8=
+github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587 h1:p03uEXoSreyu7LpFmb9YyYM8tEx2D2+7qqhLXNWHTq0=
+github.com/openstack-k8s-operators/lib-common/modules/common v0.6.1-0.20260518125357-72bdd580c587/go.mod h1:JC04T5G4E/he5ukonV1oCqa0QzFkLv761VbLruVghJM=
github.com/openstack-k8s-operators/lib-common/modules/openstack v0.6.1-0.20260417092244-81c71b39e981 h1:jN3Kvt+RYUTaL9EXeeeIqRXVjqeNF74SuLTDXmi4X2Y=
github.com/openstack-k8s-operators/lib-common/modules/openstack v0.6.1-0.20260417092244-81c71b39e981/go.mod h1:7yqbVpg0k0vW+kZks+TMU/cd1ovoejyHfVPWcyGYLHI=
github.com/openstack-k8s-operators/lib-common/modules/storage v0.6.1-0.20260417092244-81c71b39e981 h1:X3/Gc+i0ZxaROExrpLXonz9EPhftlubFnOK4aSkRLvo=
@@ -198,8 +198,8 @@ go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
-go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
-go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
+go.uber.org/zap v1.28.0 h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo=
+go.uber.org/zap v1.28.0/go.mod h1:rDLpOi171uODNm/mxFcuYWxDsqWSAVkFdX4XojSKg/Q=
go.yaml.in/yaml/v2 v2.4.2 h1:DzmwEr2rDGHl7lsFgAHxmNz/1NlQ7xLIrlN2h5d1eGI=
go.yaml.in/yaml/v2 v2.4.2/go.mod h1:081UH+NErpNdqlCXm3TtEran0rJZGxAYx9hb/ELlsPU=
go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
diff --git a/internal/controller/nova/common.go b/internal/controller/nova/common.go
index a6dff9594..33498b644 100644
--- a/internal/controller/nova/common.go
+++ b/internal/controller/nova/common.go
@@ -532,6 +532,7 @@ func (r *ReconcilerBase) generateConfigsGeneric(
templateParameters map[string]any,
extraData map[string]string, cmLabels map[string]string,
additionalTemplates map[string]string,
+ commonTemplates []string,
withScripts bool,
) error {
@@ -552,6 +553,7 @@ func (r *ReconcilerBase) generateConfigsGeneric(
CustomData: extraData,
Annotations: map[string]string{},
AdditionalTemplate: extraTemplates,
+ CommonTemplates: commonTemplates,
},
}
if withScripts {
@@ -575,10 +577,11 @@ func (r *ReconcilerBase) GenerateConfigs(
templateParameters map[string]any,
extraData map[string]string, cmLabels map[string]string,
additionalTemplates map[string]string,
+ commonTemplates []string,
) error {
return r.generateConfigsGeneric(
ctx, h, instance, configName, envVars, templateParameters, extraData,
- cmLabels, additionalTemplates, false,
+ cmLabels, additionalTemplates, commonTemplates, false,
)
}
@@ -590,11 +593,12 @@ func (r *ReconcilerBase) GenerateConfigsWithScripts(
templateParameters map[string]any,
extraData map[string]string, cmLabels map[string]string,
additionalTemplates map[string]string,
+ commonTemplates []string,
) error {
return r.generateConfigsGeneric(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()),
envVars, templateParameters, extraData,
- cmLabels, additionalTemplates, true,
+ cmLabels, additionalTemplates, commonTemplates, true,
)
}
diff --git a/internal/controller/nova/novaapi_controller.go b/internal/controller/nova/novaapi_controller.go
index e01a33ce1..e5c863936 100644
--- a/internal/controller/nova/novaapi_controller.go
+++ b/internal/controller/nova/novaapi_controller.go
@@ -575,6 +575,7 @@ func (r *NovaAPIReconciler) generateConfigs(
err = r.GenerateConfigs(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()),
hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{"ssl.conf"},
)
return err
}
diff --git a/internal/controller/nova/novacell_controller.go b/internal/controller/nova/novacell_controller.go
index 4252de2a9..524a6dfdd 100644
--- a/internal/controller/nova/novacell_controller.go
+++ b/internal/controller/nova/novacell_controller.go
@@ -816,6 +816,7 @@ func (r *NovaCellReconciler) generateComputeConfigs(
configName := instance.GetName() + "-compute-config"
err := r.GenerateConfigs(
ctx, h, instance, configName, &hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{},
)
if err != nil {
return err
diff --git a/internal/controller/nova/novacompute_controller.go b/internal/controller/nova/novacompute_controller.go
index 34910122e..05fcf28d0 100644
--- a/internal/controller/nova/novacompute_controller.go
+++ b/internal/controller/nova/novacompute_controller.go
@@ -397,6 +397,7 @@ func (r *NovaComputeReconciler) generateConfigs(
err := r.GenerateConfigs(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()), hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{},
)
return err
}
diff --git a/internal/controller/nova/novaconductor_controller.go b/internal/controller/nova/novaconductor_controller.go
index 6b746554b..4e5a32f99 100644
--- a/internal/controller/nova/novaconductor_controller.go
+++ b/internal/controller/nova/novaconductor_controller.go
@@ -518,6 +518,7 @@ func (r *NovaConductorReconciler) generateConfigs(
return r.GenerateConfigsWithScripts(
ctx, h, instance, hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{},
)
}
diff --git a/internal/controller/nova/novametadata_controller.go b/internal/controller/nova/novametadata_controller.go
index a645f2e94..327054cb5 100644
--- a/internal/controller/nova/novametadata_controller.go
+++ b/internal/controller/nova/novametadata_controller.go
@@ -581,6 +581,7 @@ func (r *NovaMetadataReconciler) generateConfigs(
err = r.GenerateConfigs(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()),
hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{"ssl.conf"},
)
return err
}
diff --git a/internal/controller/nova/novanovncproxy_controller.go b/internal/controller/nova/novanovncproxy_controller.go
index 96b4bd6b3..6df607934 100644
--- a/internal/controller/nova/novanovncproxy_controller.go
+++ b/internal/controller/nova/novanovncproxy_controller.go
@@ -537,6 +537,7 @@ func (r *NovaNoVNCProxyReconciler) generateConfigs(
err = r.GenerateConfigs(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()),
hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{},
)
return err
}
diff --git a/internal/controller/nova/novascheduler_controller.go b/internal/controller/nova/novascheduler_controller.go
index e34a3f5cc..72cf665b8 100644
--- a/internal/controller/nova/novascheduler_controller.go
+++ b/internal/controller/nova/novascheduler_controller.go
@@ -639,6 +639,7 @@ func (r *NovaSchedulerReconciler) generateConfigs(
return r.GenerateConfigs(
ctx, h, instance, nova.GetServiceConfigSecretName(instance.GetName()),
hashes, templateParameters, extraData, cmLabels, map[string]string{},
+ []string{},
)
}
diff --git a/internal/controller/placement/api_controller.go b/internal/controller/placement/api_controller.go
index 3b8d2c0c5..8a3dc34be 100644
--- a/internal/controller/placement/api_controller.go
+++ b/internal/controller/placement/api_controller.go
@@ -1465,6 +1465,7 @@ func (r *PlacementAPIReconciler) generateServiceConfigMaps(
ConfigOptions: templateParameters,
Labels: cmLabels,
AdditionalTemplate: extraTemplates,
+ CommonTemplates: []string{"ssl.conf"},
},
}
return secret.EnsureSecrets(ctx, h, instance, cms, envVars)
diff --git a/templates/nova/api/config/ssl.conf b/templates/nova/api/config/ssl.conf
deleted file mode 100644
index e3da4ecb2..000000000
--- a/templates/nova/api/config/ssl.conf
+++ /dev/null
@@ -1,21 +0,0 @@
-
- SSLRandomSeed startup builtin
- SSLRandomSeed startup file:/dev/urandom 512
- SSLRandomSeed connect builtin
- SSLRandomSeed connect file:/dev/urandom 512
-
- AddType application/x-x509-ca-cert .crt
- AddType application/x-pkcs7-crl .crl
-
- SSLPassPhraseDialog builtin
- SSLSessionCache "shmcb:/var/cache/mod_ssl/scache(512000)"
- SSLSessionCacheTimeout 300
- Mutex default
- SSLCryptoDevice builtin
- SSLHonorCipherOrder On
- SSLUseStapling Off
- SSLStaplingCache "shmcb:/run/httpd/ssl_stapling(32768)"
- SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4:!3DES
- SSLProtocol all -SSLv2 -SSLv3 -TLSv1
- SSLOptions StdEnvVars
-
diff --git a/templates/nova/metadata/config/ssl.conf b/templates/nova/metadata/config/ssl.conf
deleted file mode 100644
index e3da4ecb2..000000000
--- a/templates/nova/metadata/config/ssl.conf
+++ /dev/null
@@ -1,21 +0,0 @@
-
- SSLRandomSeed startup builtin
- SSLRandomSeed startup file:/dev/urandom 512
- SSLRandomSeed connect builtin
- SSLRandomSeed connect file:/dev/urandom 512
-
- AddType application/x-x509-ca-cert .crt
- AddType application/x-pkcs7-crl .crl
-
- SSLPassPhraseDialog builtin
- SSLSessionCache "shmcb:/var/cache/mod_ssl/scache(512000)"
- SSLSessionCacheTimeout 300
- Mutex default
- SSLCryptoDevice builtin
- SSLHonorCipherOrder On
- SSLUseStapling Off
- SSLStaplingCache "shmcb:/run/httpd/ssl_stapling(32768)"
- SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4:!3DES
- SSLProtocol all -SSLv2 -SSLv3 -TLSv1
- SSLOptions StdEnvVars
-
diff --git a/templates/placement/api/config/ssl.conf b/templates/placement/api/config/ssl.conf
deleted file mode 100644
index e3da4ecb2..000000000
--- a/templates/placement/api/config/ssl.conf
+++ /dev/null
@@ -1,21 +0,0 @@
-
- SSLRandomSeed startup builtin
- SSLRandomSeed startup file:/dev/urandom 512
- SSLRandomSeed connect builtin
- SSLRandomSeed connect file:/dev/urandom 512
-
- AddType application/x-x509-ca-cert .crt
- AddType application/x-pkcs7-crl .crl
-
- SSLPassPhraseDialog builtin
- SSLSessionCache "shmcb:/var/cache/mod_ssl/scache(512000)"
- SSLSessionCacheTimeout 300
- Mutex default
- SSLCryptoDevice builtin
- SSLHonorCipherOrder On
- SSLUseStapling Off
- SSLStaplingCache "shmcb:/run/httpd/ssl_stapling(32768)"
- SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4:!3DES
- SSLProtocol all -SSLv2 -SSLv3 -TLSv1
- SSLOptions StdEnvVars
-