fix(web): enable SSL client certificate authentication for koji-web login
- Add Apache configuration block in roles/koji_hub/tasks/main.yaml to require SSL client certificate authentication for /koji/login inside kojiweb.conf. - Fixes the koji.AuthError: could not verify client: None error during Koji Web login. Co-developed-by: Gemini AI <renich+gemini@woralelandia.com> Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
This commit is contained in:
parent
d8e1f642d0
commit
bf4676281a
1 changed files with 12 additions and 0 deletions
|
|
@ -169,6 +169,18 @@
|
|||
</Location>
|
||||
notify: Restart httpd
|
||||
|
||||
- name: Enable SSL for Koji Web
|
||||
ansible.builtin.blockinfile:
|
||||
path: "{{ koji_remote_kojiweb_httpd_conf_path }}"
|
||||
marker: "# {mark} ANSIBLE MANAGED BLOCK SSL LOGIN"
|
||||
block: |
|
||||
<Location /koji/login>
|
||||
SSLVerifyClient require
|
||||
SSLVerifyDepth 10
|
||||
SSLOptions +StdEnvVars
|
||||
</Location>
|
||||
notify: Restart httpd
|
||||
|
||||
- name: Template Koji Hub and Web configs
|
||||
ansible.builtin.template:
|
||||
src: "{{ item.src }}"
|
||||
|
|
|
|||
Loading…
Reference in a new issue