Please review pull request #208: Added missing RequestHeader lines to the example apache2.conf opened by (eklein)

Description:

Added missing RequestHeader lines to the example apache2.conf:

RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

Even though these are listed in the documentation, if you copy the apache2.conf file from /usr/share/puppet/ext/rack/files/apache2.conf, you end up with cryptic errors which are difficult to debug.

  • Opened: Fri Nov 11 22:09:59 UTC 2011
  • Based on: puppetlabs:2.7.x (8c307e8801277e35a5d3a29bfb6df4c4faad80b0)
  • Requested merge: eklein:apache2-conf-fix (4d9e0c0ef2251a87a47800e3fdb91812fde21e87)

Diff follows:

diff --git a/ext/rack/files/apache2.conf b/ext/rack/files/apache2.conf
index 381327c..097e3a0 100644
--- a/ext/rack/files/apache2.conf
+++ b/ext/rack/files/apache2.conf
@@ -26,6 +26,10 @@ Listen 8140
         SSLVerifyDepth  1
         SSLOptions +StdEnvVars
 
+        RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
+        RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
+        RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e
+
         DocumentRoot /etc/puppet/rack/public/
         RackBaseURI /
         <Directory /etc/puppet/rack/>

    

--
You received this message because you are subscribed to the Google Groups "Puppet Developers" group.
To post to this group, send email to puppet-dev@googlegroups.com.
To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.

Reply via email to