fix(web): enable SSL client certificate authentication for koji-web login
- Add Apache configuration block in roles/koji_hub/tasks/main.yaml to require SSL client certificate authentication for /koji/login inside kojiweb.conf. - Fixes the koji.AuthError: could not verify client: None error during Koji Web login. Co-developed-by: Gemini AI <renich+gemini@woralelandia.com> Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
This commit is contained in:
parent
d8e1f642d0
commit
bf4676281a
1 changed files with 12 additions and 0 deletions
|
|
@ -169,6 +169,18 @@
|
||||||
</Location>
|
</Location>
|
||||||
notify: Restart httpd
|
notify: Restart httpd
|
||||||
|
|
||||||
|
- name: Enable SSL for Koji Web
|
||||||
|
ansible.builtin.blockinfile:
|
||||||
|
path: "{{ koji_remote_kojiweb_httpd_conf_path }}"
|
||||||
|
marker: "# {mark} ANSIBLE MANAGED BLOCK SSL LOGIN"
|
||||||
|
block: |
|
||||||
|
<Location /koji/login>
|
||||||
|
SSLVerifyClient require
|
||||||
|
SSLVerifyDepth 10
|
||||||
|
SSLOptions +StdEnvVars
|
||||||
|
</Location>
|
||||||
|
notify: Restart httpd
|
||||||
|
|
||||||
- name: Template Koji Hub and Web configs
|
- name: Template Koji Hub and Web configs
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
src: "{{ item.src }}"
|
src: "{{ item.src }}"
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue