Line 374:
Line 374:
cp /etc/pki/koji/koji_ca_cert.crt /etc/kojiweb/serverca.crt
cp /etc/pki/koji/koji_ca_cert.crt /etc/kojiweb/serverca.crt
chmod 0600 /etc/kojiweb/*.crt
chmod 0600 /etc/kojiweb/*.crt
+
</syntaxhighlight>Edit the httpd file <syntaxhighlight lang="bash">
+
nano /etc/httpd/conf.d/kojiweb.conf
+
</syntaxhighlight>and uncomment the required ssl options<syntaxhighlight lang="ini">
+
# uncomment this to enable authentication via SSL client certificates
+
<Location /koji/login>
+
# SSLVerifyClient require
+
# SSLVerifyDepth 10
+
SSLOptions +StdEnvVars
+
</Location>
+
+
</syntaxhighlight>Restart the httpd daemon<syntaxhighlight lang="bash">
+
systemctl restart httpd
</syntaxhighlight>
</syntaxhighlight>