user.p12

VM_OPENSSL_APACHE.sh

@@ -20,6 +20,7 @@ cp ca/serial $CA_DIR
 cp ca/dh2048.pem $CA_DIR
 
 # correr oscp
+killall openssl 2>/dev/null
 openssl ocsp -index $CA_DIR/index.txt -port 8888 -rsigner $CA_DIR/ca.crt -rkey $CA_DIR/ca.key -CA $CA_DIR/ca.crt -text &
 
 
@@ -29,7 +30,7 @@ cp ca/ca.crt /etc/httpd/ssl/
 cp ca/apache.crt /etc/httpd/ssl/
 cp ca/apache.key /etc/httpd/ssl/
 cp conf/ssl.conf /etc/httpd/conf.d/ssl.conf
-cp conf/httpd-pam /etc/pam.d/httpd-totp
+cp conf/httpd-totp /etc/pam.d/httpd-totp
 
 # NOTA(vasco) é preciso desativar home protection outra vez
 mkdir -p /etc/systemd/system/httpd.service.d

conf/httpd.conf

@@ -0,0 +1 @@
+# LoadModule authnz_pam_module modules/mod_authnz_pam.so

conf/ssl.conf

@@ -1,6 +1,6 @@
 Listen 443 https
 <VirtualHost *:443>
-    ServerName 10.60.0.2
+    ServerName 10.60.0.1
     DocumentRoot /var/www/html
 
     SSLEngine on