X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/596f7a0c200c20426c3f29898a03b11588aa93c4..b75beef9a192ca60ed4a0c41417d4e944cea02be:/cookbooks/apache/recipes/ssl.rb diff --git a/cookbooks/apache/recipes/ssl.rb b/cookbooks/apache/recipes/ssl.rb index c85770402..f87971157 100644 --- a/cookbooks/apache/recipes/ssl.rb +++ b/cookbooks/apache/recipes/ssl.rb @@ -18,27 +18,23 @@ # certificate = node[:apache][:ssl][:certificate] +certificate_chain = node[:apache][:ssl][:certificate_chain] node.default[:ssl][:certificates] = node[:ssl][:certificates] | [certificate] include_recipe "apache" include_recipe "ssl" -apache_module "socache_shmcb" do - only_if { node[:lsb][:release].to_f >= 14.04 } -end - apache_module "ssl" apache_conf "ssl" do template "ssl.erb" - variables :certificate => certificate + variables :certificate => certificate, :certificate_chain => certificate_chain notifies :reload, "service[apache2]" end -service "apache2" do - action :nothing - subscribes :restart, "cookbook_file[/etc/ssl/certs/rapidssl.pem]" - subscribes :restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]" - subscribes :restart, "file[/etc/ssl/private/#{certificate}.key]" -end +apache = resources("service[apache2]") + +apache.subscribes(:restart, "cookbook_file[/etc/ssl/certs/#{certificate_chain}.pem]") +apache.subscribes(:restart, "cookbook_file[/etc/ssl/certs/#{certificate}.pem]") +apache.subscribes(:restart, "file[/etc/ssl/private/#{certificate}.key]")