Only allow HTTP GET tile requests (NOT POST)

[chef.git] / cookbooks / apache / recipes / ssl.rb

diff --git a/cookbooks/apache/recipes/ssl.rb b/cookbooks/apache/recipes/ssl.rb
index 83280244a8f1a66228835fe63ddf761d528f57ab..d0b1b74d52a07962cde806f4e6436952596aa158 100644 (file)
--- a/cookbooks/apache/recipes/ssl.rb
+++ b/cookbooks/apache/recipes/ssl.rb
@@ -18,8 +18,9 @@
 #
 
 certificate = node[:apache][:ssl][:certificate]
 #
 
 certificate = node[:apache][:ssl][:certificate]

+certificate_chain = node[:apache][:ssl][:certificate_chain]

 
 

-node.default[:ssl][:certificates] = node[:ssl][:certificates] | [ certificate ]
+node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate]

 
 include_recipe "apache"
 include_recipe "ssl"
 
 include_recipe "apache"
 include_recipe "ssl"


@@ -30,18 +31,15 @@ end
 
 apache_module "ssl"
 
 
 apache_module "ssl"
 

-template "/etc/apache2/conf.d/ssl" do
-  source "ssl.erb"
-  owner "root"
-  group "root"
-  mode 0644
-  variables :certificate => certificate
+apache_conf "ssl" do
+  template "ssl.erb"
+  variables :certificate => certificate, :certificate_chain => certificate_chain

   notifies :reload, "service[apache2]"
 end
 
 service "apache2" do
   action :nothing
   notifies :reload, "service[apache2]"
 end
 
 service "apache2" do
   action :nothing

-  subscribes :restart, "cookbook_file[/etc/ssl/certs/rapidssl.pem]"
+  subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate_chain}.pem]"

   subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]"
   subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]"
 end
   subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]"
   subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]"
 end