From 502183445f8c99ad9ea26f78aafba143f60ca799 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Oliver=20B=C3=B6ttcher?= <oliver.boettcher@pixelpark.com>
Date: Tue, 11 Jul 2017 14:19:48 +0200
Subject: [PATCH] ODT - INT show error page if denied

---
 customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
index 382f3800..47f09610 100644
--- a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
+++ b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
@@ -35,6 +35,13 @@ infra::profile::apache::pp_vhosts:
           - '%%{ich-trickse}{REQUEST_URI} !^/.\.html'
         rewrite_rule:
           - '^(.*)$ https://int-odt-daimler-com.pixelpark.net$1 [L,R=301]'
+    rewrites_ssl:
+      - check_auth:
+        comment: 'show error if denied'
+        rewrite_cond:
+          - '%%{ich-trickse}{SSL:SSL_CLIENT_VERIFY} !=SUCCESS'
+        rewrite_rule:
+          - '.? - [F]'
     proxy_preserve_host: true
     proxy_pass:
       - { path: /newsletterservice, url: 'http://localhost:8081/newsletterservice' }
-- 
2.39.5