From abff78372f4a8fc2515471c6566e5642cdf1e558 Mon Sep 17 00:00:00 2001 From: Andreas Gerstenberg Date: Tue, 20 Feb 2018 16:14:10 +0100 Subject: [PATCH] spk-blog wordpress config Webclient --- .../dev-sparkasseblog01.sparkasse.local.yaml | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml b/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml index a585dac7..63072ff9 100644 --- a/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml +++ b/customer/spk-blog/dev-sparkasseblog01.sparkasse.local.yaml @@ -101,10 +101,18 @@ infra::profile::wordpress::projects: ssl_cert: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem' ssl_key: '/etc/pki/tls/private/sparkasseblog.de-key.pem' ssl_chain: '/etc/pki/tls/certs/sparkasseblog.de-cert.pem' - ssl_verify_client: optional - ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem' - ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem' - ssl_verify_depth: '2' + custom_fragment: | + # Webclient Cert Config + SSLVerifyClient require + SSLCACertificateFile "/etc/pki/tls/certs/spk-root-ca.pem" + SSLCARevocationFile "/etc/pki/tls/certs/spk-cacrl.pem" + SSLCARevocationCheck "chain" + SSLVerifyClient optional + SSLVerifyDepth 2 +# ssl_verify_client: optional +# ssl_crl: '/etc/pki/tls/certs/spk-cacrl.pem' +# ssl_ca: '/etc/pki/tls/certs/spk-root-ca.pem' +# ssl_verify_depth: '2' directories: - location1: provider: location -- 2.39.5