[debian-lan-devel] [SCM] Debian-LAN development and packaging branch, master, updated. 0.7-11-g693c2f3
Andreas B. Mundt
andi at debian.org
Sat Jan 26 07:41:32 UTC 2013
The following commit has been merged in the master branch:
commit acfc6f57f0f10bd76b1b3c6fc8745b762d663ebc
Author: Andreas B. Mundt <andi at debian.org>
Date: Thu Jan 24 22:00:50 2013 +0100
Create certificate and enable SSL for the apache web server.
Force the use of SSL for GOsa in gosa.conf.
diff --git a/fai/config/files/etc/gosa/gosa.conf/GOSA b/fai/config/files/etc/gosa/gosa.conf/GOSA
index ce8ede9..4c39e71 100644
--- a/fai/config/files/etc/gosa/gosa.conf/GOSA
+++ b/fai/config/files/etc/gosa/gosa.conf/GOSA
@@ -383,7 +383,7 @@
userRDN="ou=people"
groupRDN="ou=groups"
warnSSL="true"
- forceSSL="false"
+ forceSSL="true"
forceGlobals="true"
ignoreLdapProperties="false"
rfc2307bis="false"
diff --git a/fai/config/package_config/SERVER_A b/fai/config/package_config/SERVER_A
index d672f47..ba3f60b 100644
--- a/fai/config/package_config/SERVER_A
+++ b/fai/config/package_config/SERVER_A
@@ -1,6 +1,7 @@
## Here are all default packages for the given setup that do not fit
## another class.
PACKAGES aptitude
+ssl-cert
sudo-ldap
screen
exim4 nullmailer-
diff --git a/fai/config/scripts/SERVER_A/50-apache b/fai/config/scripts/SERVER_A/50-apache
new file mode 100755
index 0000000..b976261
--- /dev/null
+++ b/fai/config/scripts/SERVER_A/50-apache
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+set -e
+
+## Switch apache userdir module on:
+$ROOTCMD a2enmod userdir
+
+## Create certificate and enable ssl:
+$ROOTCMD make-ssl-cert generate-default-snakeoil
+$ROOTCMD a2enmod ssl
+$ROOTCMD a2ensite default-ssl
diff --git a/fai/config/scripts/SERVER_A/50-userdir b/fai/config/scripts/SERVER_A/50-userdir
deleted file mode 100755
index c2685c1..0000000
--- a/fai/config/scripts/SERVER_A/50-userdir
+++ /dev/null
@@ -1,4 +0,0 @@
-#!/bin/bash
-
-## Switch apache userdir module on:
-$ROOTCMD a2enmod userdir
--
Debian-LAN development and packaging
More information about the debian-lan-devel
mailing list