From 9f2d883fc0ed296d552e47f59281e6b40800e457 Mon Sep 17 00:00:00 2001
From: Ryan O'Hara <rohara@redhat.com>
Date: Fri, 3 Jun 2016 10:50:16 -0500
Subject: [PATCH] Utilize system-wide crypto-policies (#1256253)

---
 haproxy.cfg  | 4 ++++
 haproxy.spec | 5 ++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/haproxy.cfg b/haproxy.cfg
index 324ad5e..d88c9de 100644
--- a/haproxy.cfg
+++ b/haproxy.cfg
@@ -35,6 +35,10 @@ global
     # turn on stats unix socket
     stats socket /var/lib/haproxy/stats
 
+    # utilize system-wide crypto-policies
+    ssl-default-bind-ciphers PROFILE=SYSTEM
+    ssl-default-server-ciphers PROFILE=SYSTEM
+
 #---------------------------------------------------------------------
 # common defaults that all the 'listen' and 'backend' sections will
 # use if not designated in their block
diff --git a/haproxy.spec b/haproxy.spec
index 3e1a88a..e0f00a6 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -8,7 +8,7 @@
 
 Name:           haproxy
 Version:        1.6.5
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        HAProxy reverse proxy for high availability environments
 
 Group:          System Environment/Daemons
@@ -139,6 +139,9 @@ exit 0
 %attr(-,%{haproxy_user},%{haproxy_group}) %dir %{haproxy_home}
 
 %changelog
+* Fri Jun 03 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-2
+- Utilize system-wide crypto-policies (#1256253)
+
 * Mon May 23 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-1
 - Update to 1.6.5 (#1317313)