Merge pull request #14 from telia-oss/update-ssl-policy

Use TLS 1.2 security policy for the external listener
telia-oss · Nov 16, 2018 · 1ba60be · 1ba60be
2 parents 6103080 + 0368093
commit 1ba60be
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/atc/main.tf b/modules/atc/main.tf
@@ -185,7 +185,7 @@ resource "aws_lb_listener" "external" {
   port              = "${var.web_port}"
   protocol          = "${upper(var.web_protocol)}"
   certificate_arn   = "${var.web_certificate_arn}"
-  ssl_policy        = "${var.web_certificate_arn == "" ? "" : "ELBSecurityPolicy-2015-05"}"
+  ssl_policy        = "${var.web_certificate_arn == "" ? "" : "ELBSecurityPolicy-TLS-1-2-2017-01"}"
 
   default_action {
     target_group_arn = "${aws_lb_target_group.external.arn}"