ODT - INT ssl emm_webservice

diff --git a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
index 3a3ac488b24f158061881dc8c76b7cf07d4ce3cb..efd40136aba073db63af6327f222b2b919dab2c0 100644 (file)
--- a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
+++ b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
@@ -24,7 +24,7 @@ infra::profile::apache::pp_vhosts:
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-    #ssl_verify_client: require
+    ssl_verify_client: require
     ssl_crl: '/etc/pki/tls/certs/odt-cacrl.pem'
     ssl_ca: '/etc/pki/tls/certs/odt-root-ca.pem'
     custom_fragment_ssl: 'SSLRequire %%{ich-trickse}{SSL_CLIENT_I_DN_O} eq "ODT"'
@@ -51,6 +51,7 @@ infra::profile::apache::pp_vhosts:
         provider: location
         path: '/'
         custom_fragment: |
+          # enabled until merge of 71e4c530d286b8f11863d16ee94bc2f28f800cce
           SSLRequire %%{ich-trickse}{SSL_CLIENT_I_DN_O} eq "ODT"
           SSLVerifyClient require
       - webservice:
@@ -60,9 +61,6 @@ infra::profile::apache::pp_vhosts:
           - 'ip 93.188.107.192/26'
           - 'ip 217.66.50.0/24'
           - 'ip 217.66.51.0/24'
-        custom_fragment: |
-          SSLVerifyClient none
-          SSLRequire none
       - newsletterservice:
         provider: location
         path: '/newsletterservice'