apache2modssl
March 17, 2026 ยท View on GitHub
Manages the Apache mod_ssl configuration file and package.
Actions
| Action | Description |
|---|---|
| :create | Install (if applicable) and configure mod_ssl. |
Properties
| Name | Type | Default | Description |
|---|---|---|---|
| mod_ssl_pkg | String | 'mod_ssl' | Package name for mod_ssl (used on RHEL-family platforms). |
| pass_phrase_dialog | String | platform-specific | PassPhraseDialog directive. |
| session_cache | String | 'shmcb:/var/cache/mod_ssl/scache(512000)' | SSLSessionCache directive. |
| session_cache_timeout | Integer | 300 | SSLSessionCacheTimeout in seconds. |
| mutex | String | 'default' | SSLMutex directive. |
| random_seed_startup | String | 'file:/dev/urandom 256' | SSLRandomSeed for startup. |
| random_seed_connect | String | 'builtin' | SSLRandomSeed for connect. |
| cipher_suite | String | platform-specific | SSLCipherSuite directive. |
| protocol | Array | ['-ALL', '+TLSv1.2'] | Enabled SSL/TLS protocols. |
| honor_cipher_order | String | 'on' | SSLHonorCipherOrder directive. |
| compression | String | 'off' | SSLCompression directive. |
| insecure_renegotiation | String | 'off' | SSLInsecureRenegotiation directive. |
| strict_sni_vhost_check | String | 'on' | SSLStrictSNIVHostCheck directive. |
Examples
apache2_mod_ssl 'default' do
protocol ['-ALL', '+TLSv1.2', '+TLSv1.3']
end