From: Oliver Böttcher Date: Tue, 11 Jul 2017 11:41:47 +0000 (+0200) Subject: ODT - int fix client ssl client X-Git-Tag: v0.1.0~2675^2~1 X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=00124589fb9d999697f08b9ff7320e4c3353bb89;p=pixelpark%2Fhiera.git ODT - int fix client ssl client --- diff --git a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml index b1dca80f..f1923660 100644 --- a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml +++ b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml @@ -24,7 +24,7 @@ infra::profile::apache::pp_vhosts: ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem' ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem' - ssl_verify_client: require + #ssl_verify_client: require ssl_crl: '/etc/pki/tls/certs/odt-cacrl.pem' ssl_ca: '/etc/pki/tls/certs/odt-root-ca.pem' custom_fragment_ssl: 'SSLRequire %%{ich-trickse}{SSL_CLIENT_S_DN_O} eq "ODT"' @@ -67,6 +67,10 @@ infra::profile::apache::pp_vhosts: - ip 192.168.170.53 - ip 192.168.170.52 - ip 54.205.87.231 + - slash: + provider: location + path: '/' + custom_fragment: "SSLVerifyClient require" infra::profile::cron::cronjobs: fetchcrl: