HTTPS support in httpd upstart job fixed.

svn path=/nixos/trunk/; revision=11613
This commit is contained in:
Michael Raskin 2008-04-12 20:08:35 +00:00
parent bfa0e51ee5
commit 5e1ee10f3c
2 changed files with 21 additions and 3 deletions

View File

@ -1464,6 +1464,22 @@
";
};
sslServerCert = mkOption {
default = "";
example = /var/host.cert;
description = "
Path to server SSL certificate.
";
};
sslServerKey = mkOption {
default = "";
example = /var/host.key;
description = "
Path to server SSL certificate key.
";
};
logDir = mkOption {
default = "/var/log/httpd";
description = "

View File

@ -58,6 +58,8 @@ let
allSubservices = mainSubservices ++ pkgs.lib.concatMap subservicesFor vhosts;
sslServerCert = cfg.sslServerCert;
sslServerKey = cfg.sslServerKey;
# !!! should be in lib
writeTextInDir = name: text:
@ -81,7 +83,7 @@ let
"mime" "dav" "status" "autoindex" "asis" "info" "cgi" "dav_fs"
"vhost_alias" "negotiation" "dir" "imagemap" "actions" "speling"
"userdir" "alias" "rewrite" "proxy" "proxy_http"
] ++ optional cfg.enableSSL "ssl_module";
] ++ optional cfg.enableSSL "ssl";
loggingConf = ''
@ -128,8 +130,8 @@ let
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile @sslServerCert@
SSLCertificateKeyFile @sslServerKey@
SSLCertificateFile ${sslServerCert}
SSLCertificateKeyFile ${sslServerKey}
# MSIE compatability.
SetEnvIf User-Agent ".*MSIE.*" \