sni: make ssl_cert configurable per vhost

to support sni we configure ssl_certs on a vhost basis.
additionally this commit introduces a generic configuration hash which
will be used to replace most other parameters in the future.

1 files changed, 10 insertions, 3 deletions

diff --git a/manifests/ssl/base.pp b/manifests/ssl/base.pp
index 65bd5f7..3f32913 100644
--- a/manifests/ssl/base.pp
+++ b/manifests/ssl/base.pp
@@ -1,8 +1,15 @@
 # basic defaults for ssl support
-class apache::ssl::base {
-  ::apache::config::include{ 'ssl_defaults.inc': }
+class apache::ssl::base (
+) {
+  apache::config::include {
+    'ssl_defaults.inc':
+      content => template('apache/include.d/ssl_defaults.inc.erb');
+  }
 
   if !$apache::no_default_site {
-    ::apache::vhost::file{ '0-default_ssl': }
+    apache::vhost::file{
+      '0-default_ssl':
+        content => template('apache/vhosts/0-default_ssl.conf.erb');
+    }
   }
 }