cookbook-openstack-identity/templates/default
Karim El Aammari c5211ab38f Possibility to set SSLCARevocationPath for keystone as chef default attribute "ca_revocation_path"
Also set SSLCARevocationCheck alongside SSLCARevocationPath, all one
gets by setting only the latter is warnings in Apache logs.

Note: with Apache 2.3.15 or newer enabling revocation checks causes
certificate validation to fail also when no CRLs for the given certificate
could be found. For details see
https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcarevocationcheck

Co-authored-by: Marek Szuba <m.szuba@gsi.de>
Signed-off-by: Marek Szuba <m.szuba@gsi.de>
Change-Id: Ic64249ba32d43877f9ef0325e7156e0d15622a69
2021-07-20 13:26:02 +01:00
..
cloud_config.erb Improve ChefSpec test speed by enabling caching 2019-12-17 18:59:42 -08:00
keystone-paste.ini.erb Drop admin endpoints 2019-04-18 11:06:34 +00:00
openrc.erb Add a cloud_config recipe 2019-08-30 14:29:33 +00:00
wsgi-keystone.conf.erb Possibility to set SSLCARevocationPath for keystone as chef default attribute "ca_revocation_path" 2021-07-20 13:26:02 +01:00