diff --git a/files/sni b/files/sni new file mode 100644 index 0000000..67da4c3 --- /dev/null +++ b/files/sni @@ -0,0 +1,4 @@ +# Enable SNI for HTTPS (this breaks HTTPS sites for MSIE on WinXP) + + NameVirtualHost *:443 + diff --git a/manifests/ssl.pp b/manifests/ssl.pp index 2e1569a..1a0d607 100644 --- a/manifests/ssl.pp +++ b/manifests/ssl.pp @@ -31,4 +31,14 @@ class httpd::ssl { fail( "${::operatingsystem} not defined in httpd::ssl.") } } + + if $::lsbdistcodename == 'precise' { + # Unconditionally enable SNI on Ubuntu 12.04 (it's on by default in 14.04) + file { '/etc/apache2/conf.d/sni': + ensure => present, + source => 'puppet:///modules/httpd/sni', + notify => Service['httpd'], + require => Package['httpd'], + } + } }