
  SSLProtocol -ALL +TLSv1
  SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
  SSLVerifyClient         optional
  SSLVerifyDepth          1
  SSLOptions              +StdEnvVars

  RackBaseURI /
  <Directory /etc/puppet/rack/>
    Options None
    AllowOverride None
    Order allow,deny
    Allow from all
  </Directory>
<% if @puppet_central_ca -%>

  ProxyRequests Off
  <Proxy *>
    Order allow,deny
<% @proxy_allow_from.each do |host| -%>
    Allow from <%= host %>
<% end -%>
  </Proxy>

  ProxyVia On

  ProxyPassMatch ^/([^/]+/certificate.*)$ <%= @puppet_central_ca %>/$1
<% end -%>



  SSLProtocol -ALL +TLSv1
  SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
  SSLVerifyClient         optional
  SSLVerifyDepth          1
  SSLOptions              +StdEnvVars

  RackBaseURI /
  <Directory /etc/puppet/rack/>
    Options None
    AllowOverride None
    Order allow,deny
    Allow from all
  </Directory>
<% if @puppet_central_ca -%>

  ProxyRequests Off
  <Proxy *>
    Order allow,deny
<% @proxy_allow_from.each do |host| -%>
    Allow from <%= host %>
<% end -%>
  </Proxy>

  ProxyVia On

  ProxyPassMatch ^/([^/]+/certificate.*)$ <%= @puppet_central_ca %>/$1
  <Location ~ "/[^/]+/certificate">
   PassengerHighPerformance Off
  </Location>
<% end -%>


Fix CA proxying with passenger
Fix CA proxying with passenger
