From 64b212c245a54901cacee5e824923d621be46c1c Mon Sep 17 00:00:00 2001 From: Yanis Guenane Date: Fri, 30 Jan 2015 16:43:46 -0500 Subject: [PATCH] Proper SSL config for PuppetDB vhost When setting up an SSL vhost, the apache::vhost resource needs both ssl_cert and ssl_key parameters. Change-Id: Idc48e6128744853219254cd41ce192cf293d9ebd --- manifests/install/puppetdb/server.pp | 1 + scripts/bootstrap.pp | 1 + 2 files changed, 2 insertions(+) diff --git a/manifests/install/puppetdb/server.pp b/manifests/install/puppetdb/server.pp index 56fee7ed..42a7239e 100644 --- a/manifests/install/puppetdb/server.pp +++ b/manifests/install/puppetdb/server.pp @@ -26,6 +26,7 @@ class cloud::install::puppetdb::server { docroot => '/tmp', ssl => true, ssl_cert => '/etc/ssl/certs/puppetdb.pem', + ssl_key => '/etc/ssl/certs/puppetdb.pem', port => '8081', servername => $::fqdn, proxy_pass => [ diff --git a/scripts/bootstrap.pp b/scripts/bootstrap.pp index 89ebf343..32a85bd7 100644 --- a/scripts/bootstrap.pp +++ b/scripts/bootstrap.pp @@ -18,6 +18,7 @@ apache::vhost { 'puppetdb' : docroot => '/tmp', ssl => true, ssl_cert => '/etc/ssl/certs/puppetdb.pem', + ssl_key => '/etc/ssl/certs/puppetdb.pem', port => '8081', servername => $::fqdn, proxy_pass => [