From: Andreas Gerstenberg <gerstenberg@pixelpark.com>
Date: Tue, 20 Feb 2018 15:14:10 +0000 (+0100)
Subject: spk-blog wordpress config Webclient
X-Git-Tag: v0.1.0~1577
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=abff78372f4a8fc2515471c6566e5642cdf1e558;p=pixelpark%2Fhiera.git

spk-blog wordpress config Webclient
---

diff --git a/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml b/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml
index a585dac7..63072ff9 100644
--- a/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml
+++ b/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml
@@ -101,10 +101,18 @@ infra::profile::wordpress::projects:
     ssl_cert: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
     ssl_key: '/etc/pki/tls/private/sparkasseblog.de-key.pem'
     ssl_chain: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem'
-    ssl_verify_client: optional
-    ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem'
-    ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem'
-    ssl_verify_depth: '2'
+        custom_fragment: |
+          # Webclient Cert Config
+          SSLVerifyClient require
+          SSLCACertificateFile    "/etc/pki/tls/certs/spk-root-ca.pem"
+          SSLCARevocationFile     "/etc/pki/tls/certs/spk-cacrl.pem"
+          SSLCARevocationCheck    "chain"
+          SSLVerifyClient         optional
+          SSLVerifyDepth          2
+#    ssl_verify_client: optional
+#    ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem'
+#    ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem'
+#    ssl_verify_depth: '2'
     directories:
       - location1:
         provider: location