puppet-tripleo/releasenotes/notes/ensure-ssl-conf-2f32c6ead6f3bb0e.yaml
Lukas Bezdicka 9e729c0db2 Ensure we configure ssl.conf
Every time we call apache module regardless of using SSL we have to
configure mod_ssl from puppet-apache or we'll hit issue during package
update. File /etc/httpd/conf.d/ssl.conf from mod_ssl package contains
Listen 443 while apache::mod::ssl just configures SSL bits but does not
add Listen. If the apache::mod::ssl is not included the ssl.conf file is
removed and recreated during mod_ssl package update. This causes
conflict on port 443.

Change-Id: Ic5a0719f67d3795a9edca25284d1cf6f088073e8
Related-Bug: 1682448
Resolves: rhbz#1441977
2017-04-18 17:07:46 +02:00

11 lines
542 B
YAML

---
fixes:
- |
With having package mod_ssl by default installed in images we introduced
issue with mod_ssl package update. In case of SSL not being used or
provided by HAproxy the puppet-apache module by default purges the
ssl.conf file. The package update then recreates the file with default
Listen 443 option. This causes conflict on 443 port during httpd restart.
If we include ::apache::mod::ssl the ssl.conf file will be configured and
the Listen option will be used only if there is vhost set to use SSL.