diff --git a/server/conf/vhost.conf.master b/server/conf/vhost.conf.master index a259c29906fcce09a52e11daa22b5ad2ebb12740..ee7dcac076e68ab26df912ac3428e3f432d5b29a 100644 --- a/server/conf/vhost.conf.master +++ b/server/conf/vhost.conf.master @@ -75,15 +75,15 @@ # </IfModule> SSLCertificateFile <tmpl_var name='ssl_crt_file'> SSLCertificateKeyFile <tmpl_var name='ssl_key_file'> -<tmpl_if name='has_bundle_cert'> - <tmpl_if name='apache_version' op='<' value='2.4.8' format='version'> - SSLCertificateChainFile <tmpl_var name='ssl_bundle_file'> - </tmpl_if> <tmpl_if name='apache_version' op='>=' value='2.4' format='version'> SSLUseStapling on SSLStaplingResponderTimeout 5 SSLStaplingReturnResponderErrors off </tmpl_if> +<tmpl_if name='has_bundle_cert'> + <tmpl_if name='apache_version' op='<' value='2.4.8' format='version'> + SSLCertificateChainFile <tmpl_var name='ssl_bundle_file'> + </tmpl_if> </tmpl_if> </tmpl_if> </IfModule> diff --git a/server/plugins-available/apache2_plugin.inc.php b/server/plugins-available/apache2_plugin.inc.php index 3aa851f649d302641e3734ce3a617267412444e0..6fa3101ed76bb59d4ed7f0aa1ebe121217c079a7 100644 --- a/server/plugins-available/apache2_plugin.inc.php +++ b/server/plugins-available/apache2_plugin.inc.php @@ -1223,8 +1223,9 @@ class apache2_plugin { $app->dbmaster->query("UPDATE web_domain SET `ssl` = ?, `ssl_letsencrypt` = ? WHERE `domain` = ? AND `server_id` = ?", $data['new']['ssl'], 'n', $data['new']['domain'], $conf['server_id']); } } - - if(@is_file($bundle_file)) $vhost_data['has_bundle_cert'] = 1; + + // Use separate bundle file only for apache versions < 2.4.8 + if(@is_file($bundle_file) && version_compare($app->system->getapacheversion(true), '2.4.8', '<')) $vhost_data['has_bundle_cert'] = 1; // HTTP/2.0 ? $vhost_data['enable_http2'] = 'n';