diff --git a/puppet/templates/puppet-httpd.conf.erb b/puppet/templates/puppet-httpd.conf.erb index af3528d..05a1c48 100644 --- a/puppet/templates/puppet-httpd.conf.erb +++ b/puppet/templates/puppet-httpd.conf.erb @@ -68,6 +68,13 @@ SSLCertificateChainFile <%= puppet_ssldir %>/certs/ca.pem # huge file containing all of them (file must be PEM encoded) SSLCACertificateFile <%= puppet_ssldir %>/certs/ca.pem +# Certificate Revocation List: +# Point SSLCARevocation file at a file containing the +# Certificate Revocation Lists (CRL) of Certification +# Authorities (CA) whose clients you deal with. These are used +# for client authentication. +SSLCARevocationFile <%= puppet_ssldir %>/ca/ca_crl.pem + # Client Authentication (Type): # Client certificate verification type and depth. Types are # none, optional, require and optional_no_ca. Depth is a