diff --git a/apache/manifests/init.pp b/apache/manifests/init.pp index c790395..b831160 100644 --- a/apache/manifests/init.pp +++ b/apache/manifests/init.pp @@ -501,6 +501,7 @@ class apache::sslproxy( $ssl_key="${::puppet_ssldir}/private_keys/${::homename}.pem", $ssl_cert="${::puppet_ssldir}/certs/${::homename}.pem", $ssl_ca="${::puppet_ssldir}/certs/ca.pem", + $ssl_verifydepth="1", ) { include ssl diff --git a/apache/templates/sslproxy.conf.erb b/apache/templates/sslproxy.conf.erb index 877ffd5..cbdc1b9 100644 --- a/apache/templates/sslproxy.conf.erb +++ b/apache/templates/sslproxy.conf.erb @@ -2,3 +2,4 @@ SSLProxyEngine on SSLProxyMachineCertificateFile <%= @ssl_bundle %> SSLProxyCACertificateFile <%= @ssl_ca %> SSLProxyVerify require +SSLProxyVerifyDepth <%= @ssl_verifydepth %>