Can Terraform AWS ELB provider support configuring the SSL Cipher Suite?

[ketzacoatl]

I am not sure AWS provides API endpoints or attributes for this (I spent some time looking through their docs to confirm), but I also see no mention of the cipher suite in the Terraform codebase.

I am assuming this is not possible, but I would like to be sure: Is it possible for the ELB provider to support configuring the SSL Cipher Suite used by an ELB?

[gtmtech]

+1 - definitely needed, and definitely a terraform omission.

Especially because the default ELB ciphersuite is no longer recommended to be used, and so if you want to run a compliant/secure ELB, you should be doing a custom one anyway.

Sadly this is something that terraform lacks, but cloudformation has

Do you know if anyone is scheduled to look at this @catsby ?

[anthonycorletti]

👍

[catsby]

Hey @gtmtech – no, can't say anyone is looking into this. I'm not sure how it's done, is this done through Load Balancer Policy types?

I don't believe I'll be getting to this soon, but would love to hear more on how it's done via the API

[catsby]

Looks like this is implemented in #5637! We'll review and get that in if possible.
Thanks!

[stack72]

Closed via the rebased PR in #8084

[cappellem]

+1 :)

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.