diff options
| author | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-03-17 11:24:04 +0200 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2017-03-27 14:52:45 +0300 |
| commit | 9df58642c62387acda2bba11f5423c45bf69399d (patch) | |
| tree | 0d2b27097a398524694cf4e1778b785e95131de5 /releasenotes | |
| parent | cc2f0462e751ba237af59d7f6c4db4d7b4dfa9b5 (diff) | |
| download | kolla-9df58642c62387acda2bba11f5423c45bf69399d.tar.gz kolla-9df58642c62387acda2bba11f5423c45bf69399d.zip | |
RHEL: Add mod_ssl for services running over httpd
This apache module is necessary for when one wants to use TLS for the
services running over httpd.
This only addressed RHEL based systems at the moment, since there is no
such package available for Ubuntu. This requires apache2.2-common which
will carry a lot more dependencies; So I think this should be handled
and decided in a separate patch.
when installing mod_ssl in RHEL-based distributions, an ssl.conf file is
installed in the /etc/httpd/conf.d directory. This file tells httpd to
listen on port 443; however, we don't want to do this by default, since
this should be explicitly enabled by the container's configuration. This
line is thus removed from the configuration.
A release note was added, which specifies this. And the last sentence
can be removed if this is addressed for debian/ubuntu as well.
Related-Bug: #1675490
Co-Authored-By: Martin André <m.andre@redhat.com>
Change-Id: Id6215d31547247309d43c031e163fa9e4c4ec5dc
Diffstat (limited to 'releasenotes')
| -rw-r--r-- | releasenotes/notes/Add-mod_ssl-to-images-2d2972c3cf794f65.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/releasenotes/notes/Add-mod_ssl-to-images-2d2972c3cf794f65.yaml b/releasenotes/notes/Add-mod_ssl-to-images-2d2972c3cf794f65.yaml new file mode 100644 index 000000000..9a49a6e76 --- /dev/null +++ b/releasenotes/notes/Add-mod_ssl-to-images-2d2972c3cf794f65.yaml @@ -0,0 +1,6 @@ +--- +features: + - Images that contain services that run over httpd now ship mod_ssl as well. + This is useful when deployers want to configure these services to serve TLS + in the internal network instead of just relying on HAProxy for the TLS + termination. Note that currently this only applies to RHEL-based images. |