Kaynağa Gözat

Add SSL stapling cache for apache

Fixes #406
Dan Milon 8 yıl önce
ebeveyn
işleme
34f3a483aa

+ 1
- 0
roles/common/files/etc_apache2_conf-available_ssl-stapling-cache.conf Dosyayı Görüntüle

@@ -0,0 +1 @@
1
+SSLStaplingCache shmcb:${APACHE_RUN_DIR}/stapling_cache(128000)

+ 21
- 0
roles/common/tasks/ssl.yml Dosyayı Görüntüle

@@ -20,6 +20,27 @@
20 20
 - name: Enable NameVirtualHost for HTTPS
21 21
   lineinfile: dest=/etc/apache2/ports.conf regexp='^    NameVirtualHost \*:443' insertafter='^<IfModule mod_ssl.c>' line='    NameVirtualHost *:443'
22 22
 
23
+- name: Enable Apache SOCACHE_SHMCB module for the SSL stapling cache
24
+  command: a2enmod socache_shmcb
25
+    creates=/etc/apache2/mods-enabled/socache_shmcb.load
26
+  notify: restart apache
27
+  when: ansible_distribution_release != 'wheezy'
28
+
29
+- name: Add Apache SSL stapling cache configuration
30
+  copy:
31
+    src=etc_apache2_conf-available_ssl-stapling-cache.conf
32
+    dest=/etc/apache2/conf-available/ssl-stapling-cache.conf
33
+    owner=root
34
+    group=root
35
+  when: ansible_distribution_release != 'wheezy'
36
+  notify: restart apache
37
+
38
+- name: Enable Apache SSL stapling cache configuration
39
+  command: a2enconf ssl-stapling-cache
40
+    creates=/etc/apache2/conf-enabled/ssl-stapling-cache.conf
41
+  when: ansible_distribution_release != 'wheezy'
42
+  notify: restart apache
43
+
23 44
 - name: Add common Apache SSL config
24 45
   template:
25 46
     src=etc_apache2_ssl.conf.j2

Loading…
İptal
Kaydet