foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apache: Require client certificate authentication

Browse source
This commit is contained in:
Timo Makinen 2020-08-28 09:58:36 +00:00
parent 480822619d
commit affeddd2cc
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/apache/templates/site.conf.j2
View file

@ -10,6 +10,11 @@
SSLHonorCipherOrder off SSLHonorCipherOrder off
SSLSessionTickets off SSLSessionTickets off
# Server certificates
SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key SSLCertificateKeyFile {{ tls_private }}/{{ inventory_hostname }}.key
SSLCertificateFile {{ tls_certs }}/{{ inventory_hostname }}.crt SSLCertificateFile {{ tls_certs }}/{{ inventory_hostname }}.crt
# Client certificate auth
SSLCACertificateFile {{ tls_certs }}/ca.crt
SSLVerifyClient require
</VirtualHost> </VirtualHost>