X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/d228f465b5bf9f5dffedcebad5c7fadcbba21cc3..09f04cdbddd45cb7074086a650cd3415c5b0fa70:/cookbooks/apache/recipes/ssl.rb

diff --git a/cookbooks/apache/recipes/ssl.rb b/cookbooks/apache/recipes/ssl.rb
index 37bf822c5..83280244a 100644
--- a/cookbooks/apache/recipes/ssl.rb
+++ b/cookbooks/apache/recipes/ssl.rb
@@ -17,9 +17,17 @@
 # limitations under the License.
 #
 
+certificate = node[:apache][:ssl][:certificate]
+
+node.default[:ssl][:certificates] = node[:ssl][:certificates] | [ certificate ]
+
 include_recipe "apache"
 include_recipe "ssl"
 
+apache_module "socache_shmcb" do
+  only_if { node[:lsb][:release].to_f >= 14.04 }
+end
+
 apache_module "ssl"
 
 template "/etc/apache2/conf.d/ssl" do
@@ -27,12 +35,13 @@ template "/etc/apache2/conf.d/ssl" do
   owner "root"
   group "root"
   mode 0644
-  notifies :reload, resources(:service => "apache2")
+  variables :certificate => certificate
+  notifies :reload, "service[apache2]"
 end
 
 service "apache2" do
   action :nothing
-  subscribes :restart, resources(:cookbook_file => "/etc/ssl/certs/rapidssl.pem")
-  subscribes :restart, resources(:cookbook_file => "/etc/ssl/certs/openstreetmap.pem")
-  subscribes :restart, resources(:file => "/etc/ssl/private/openstreetmap.key")
+  subscribes :restart, "cookbook_file[/etc/ssl/certs/rapidssl.pem]"
+  subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]"
+  subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]"
 end