]> git.donarmstrong.com Git - dsa-puppet.git/blobdiff - 3rdparty/modules/apache/templates/vhost/_ssl.erb
try again, with puppetforge modules, correctly included now
[dsa-puppet.git] / 3rdparty / modules / apache / templates / vhost / _ssl.erb
diff --git a/3rdparty/modules/apache/templates/vhost/_ssl.erb b/3rdparty/modules/apache/templates/vhost/_ssl.erb
new file mode 100644 (file)
index 0000000..5169925
--- /dev/null
@@ -0,0 +1,46 @@
+<% if @ssl -%>
+
+  ## SSL directives
+  SSLEngine on
+  SSLCertificateFile      "<%= @ssl_cert %>"
+  SSLCertificateKeyFile   "<%= @ssl_key %>"
+  <%- if @ssl_chain -%>
+  SSLCertificateChainFile "<%= @ssl_chain %>"
+  <%- end -%>
+  <%- if @ssl_certs_dir && @ssl_certs_dir != '' -%>
+  SSLCACertificatePath    "<%= @ssl_certs_dir %>"
+  <%- end -%>
+  <%- if @ssl_ca -%>
+  SSLCACertificateFile    "<%= @ssl_ca %>"
+  <%- end -%>
+  <%- if @ssl_crl_path -%>
+  SSLCARevocationPath     "<%= @ssl_crl_path %>"
+  <%- end -%>
+  <%- if @ssl_crl -%>
+  SSLCARevocationFile     "<%= @ssl_crl %>"
+  <%- end -%>
+  <%- if @ssl_crl_check && scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
+  SSLCARevocationCheck    "<%= @ssl_crl_check %>"
+  <%- end -%>
+  <%- if @ssl_proxyengine -%>
+  SSLProxyEngine On
+  <%- end -%>
+  <%- if @ssl_protocol -%>
+  SSLProtocol             <%= @ssl_protocol %>
+  <%- end -%>
+  <%- if @ssl_cipher -%>
+  SSLCipherSuite          <%= @ssl_cipher %>
+  <%- end -%>
+  <%- if @ssl_honorcipherorder -%>
+  SSLHonorCipherOrder     <%= @ssl_honorcipherorder %>
+  <%- end -%>
+  <%- if @ssl_verify_client -%>
+  SSLVerifyClient         <%= @ssl_verify_client %>
+  <%- end -%>
+  <%- if @ssl_verify_depth -%>
+  SSLVerifyDepth          <%= @ssl_verify_depth %>
+  <%- end -%>
+  <%- if @ssl_options -%>
+  SSLOptions <%= Array(@ssl_options).join(' ') %>
+  <%- end -%>
+<% end -%>