source: package_branches/invirt-web/hvirt/files/etc/apache2/conf.invirt/certs.mako @ 3008

<%page args="cfg, invirt_ssl" />

% if cfg.web.sites.certs.port not in [80, 443]:
  Listen ${cfg.web.sites.certs.port}
% endif
<VirtualHost *:${cfg.web.sites.certs.port}>
        ServerAdmin ${cfg.web.errormail}
        ServerName ${cfg.web.hostname}:${cfg.web.sites.certs.port}
        <%call expr="invirt_ssl()">
                Require valid-user
                AuthType SSLCert
                AuthSSLCertVar SSL_CLIENT_S_DN_Email
                AuthSSLCertStripSuffix "${cfg.web.sites.certs.suffix}"
        </%call>
        SSLVerifyClient require
</VirtualHost>