[2/3] enable dual-stack ECDSA and RSA certificates in Apache

Message ID 20171011194519.5d7e33e7.peter.mueller@link38.eu
State Accepted
Commit 73ba2286201fbcf2bfb9786f29d2758e6aa380c6
Headers
Series None |

Commit Message

Peter Müller Oct. 12, 2017, 4:45 a.m. UTC
  Note: Apache crashes if any of these files does not exist. Thereof it
is necessary to generate missing keys on existing installations.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/httpd/vhosts.d/ipfire-interface-ssl.conf | 2 ++
 1 file changed, 2 insertions(+)
  

Patch

diff --git a/config/httpd/vhosts.d/ipfire-interface-ssl.conf b/config/httpd/vhosts.d/ipfire-interface-ssl.conf
index 995c28e52..c9ccd5be5 100644
--- a/config/httpd/vhosts.d/ipfire-interface-ssl.conf
+++ b/config/httpd/vhosts.d/ipfire-interface-ssl.conf
@@ -13,6 +13,8 @@ 
     SSLHonorCipherOrder on
     SSLCertificateFile /etc/httpd/server.crt
     SSLCertificateKeyFile /etc/httpd/server.key
+    SSLCertificateFile /etc/httpd/server-ecdsa.crt
+    SSLCertificateKeyFile /etc/httpd/server-ecdsa.key
 
     <Directory /srv/web/ipfire/html>
         Options ExecCGI