fix(web): enable SSL client certificate authentication for koji-web login

- Add Apache configuration block in roles/koji_hub/tasks/main.yaml to require SSL client certificate authentication for /koji/login inside kojiweb.conf.

- Fixes the koji.AuthError: could not verify client: None error during Koji Web login.

Co-developed-by: Gemini AI <renich+gemini@woralelandia.com>

Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
This commit is contained in:
Rénich Bon Ćirić 2026-06-16 12:06:30 -06:00
commit bf4676281a
Signed by: renich
GPG key ID: AB2A9F49384FE324

View file

@ -169,6 +169,18 @@
</Location> </Location>
notify: Restart httpd notify: Restart httpd
- name: Enable SSL for Koji Web
ansible.builtin.blockinfile:
path: "{{ koji_remote_kojiweb_httpd_conf_path }}"
marker: "# {mark} ANSIBLE MANAGED BLOCK SSL LOGIN"
block: |
<Location /koji/login>
SSLVerifyClient require
SSLVerifyDepth 10
SSLOptions +StdEnvVars
</Location>
notify: Restart httpd
- name: Template Koji Hub and Web configs - name: Template Koji Hub and Web configs
ansible.builtin.template: ansible.builtin.template:
src: "{{ item.src }}" src: "{{ item.src }}"