X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/3ce3f0c3311b306f9808355397ee43424f14aa31..4d11d2e084189bc2c3042e67fe3f67bd9dfa182b:/cookbooks/apache/recipes/ssl.rb diff --git a/cookbooks/apache/recipes/ssl.rb b/cookbooks/apache/recipes/ssl.rb index 8efbe03d2..d0b1b74d5 100644 --- a/cookbooks/apache/recipes/ssl.rb +++ b/cookbooks/apache/recipes/ssl.rb @@ -18,8 +18,9 @@ # certificate = node[:apache][:ssl][:certificate] +certificate_chain = node[:apache][:ssl][:certificate_chain] -node.default[:ssl][:certificates] = node[:ssl][:certificates] | [ certificate ] +node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate] include_recipe "apache" include_recipe "ssl" @@ -29,17 +30,16 @@ apache_module "socache_shmcb" do end apache_module "ssl" -apache_module "headers" apache_conf "ssl" do template "ssl.erb" - variables :certificate => certificate + variables :certificate => certificate, :certificate_chain => certificate_chain notifies :reload, "service[apache2]" end service "apache2" do action :nothing - subscribes :restart, "cookbook_file[/etc/ssl/certs/rapidssl.pem]" + subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate_chain}.pem]" subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]" subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]" end