puppet-horizon/releasenotes/notes/add-ssl_verify_client-3e2bc9a7f1d4291a.yaml
Tobias Urdin 841d4d734e Add ssl_verify_client
This adds the ssl_verify_client parameter that
is passed down to the apache::vhost resource.

Without this being set, as of puppetlabs-apache 2.1.0,
the horizon_ca parameter will be ignored and you won't
get the CA/intermediate set in the vhost configuration. [1]

This was introduced a long long time ago which means we should
backport this or SSL is semi-broken when using this module.

[1] https://github.com/puppetlabs/puppetlabs-apache/blob/2.1.0/CHANGELOG.md#changed

Change-Id: I9f60f266400a6d0ccfad757aa33009929c02cde7
2020-10-14 17:46:04 +09:00

11 lines
388 B
YAML

---
features:
- |
Added the ssl_verify_client parameter to init class and horizon::wsgi::apache
that is passed down to the created apache::vhost resource.
upgrade:
- |
The puppetlabs-apache module 2.1.0 introduced a change where ssl_verify_client
is required otherwise the SSL CA certificate passed to the horizon module using
the horizon_ca parameter is ignored.