Stop using SSLCertificateChainFile
authorJulien Cristau <jcristau@debian.org>
Mon, 4 Jul 2016 19:33:22 +0000 (21:33 +0200)
committerJulien Cristau <jcristau@debian.org>
Mon, 4 Jul 2016 19:33:22 +0000 (21:33 +0200)
It's deprecated since apache 2.4, the chain now lives with the
certificate.

modules/apache2/files/puppet-ssl-macros

index e19a000..75bdecc 100644 (file)
@@ -9,9 +9,8 @@
 
     <Macro common-debian-service-ssl $name>
       SSLEngine on
-      SSLCertificateFile    /etc/ssl/debian/certs/$name.crt
+      SSLCertificateFile    /etc/ssl/debian/certs/$name.crt-chained
       SSLCertificateKeyFile /etc/ssl/private/$name.key
-      SSLCertificateChainFile /etc/ssl/debian/certs/$name.crt-chain
     </Macro>
 
     <Macro common-debian-service-https-redirect $bind $name>