ebdc05976f
Enable Server Name Indication (SNI) on Ubuntu 12.04 LTS which runs Apache 2.2. This allows running multiple HTTPS sites from one IP address/TCP port when SubjectAltNames are specified in the certificate, but MSIE on WinXP does not support this extension and so will cease working for HTTPS sites managed by this module. Note that this behavior is already implicit on Apache 2.4 based platforms (such as Ubuntu 14.04 LTS). Change-Id: I05c8e335f68d9461d8d81a3d12343d1920a738d4
45 lines
989 B
Puppet
45 lines
989 B
Puppet
# Class: httpd::ssl
|
|
#
|
|
# This class installs Apache SSL capabilities
|
|
#
|
|
# Parameters:
|
|
# - The $ssl_package name from the apache::params class
|
|
#
|
|
# Actions:
|
|
# - Install Apache SSL capabilities
|
|
#
|
|
# Requires:
|
|
#
|
|
# Sample Usage:
|
|
#
|
|
class httpd::ssl {
|
|
|
|
include ::httpd
|
|
|
|
case $::operatingsystem {
|
|
'centos', 'fedora', 'redhat', 'scientific': {
|
|
package { 'apache_ssl_package':
|
|
ensure => installed,
|
|
name => $httpd::params::ssl_package,
|
|
require => Package['httpd'],
|
|
}
|
|
}
|
|
'ubuntu', 'debian': {
|
|
httpd::mod { 'ssl': ensure => present, }
|
|
}
|
|
default: {
|
|
fail( "${::operatingsystem} not defined in httpd::ssl.")
|
|
}
|
|
}
|
|
|
|
if $::lsbdistcodename == 'precise' {
|
|
# Unconditionally enable SNI on Ubuntu 12.04 (it's on by default in 14.04)
|
|
file { '/etc/apache2/conf.d/sni':
|
|
ensure => present,
|
|
source => 'puppet:///modules/httpd/sni',
|
|
notify => Service['httpd'],
|
|
require => Package['httpd'],
|
|
}
|
|
}
|
|
}
|