anchor.diff: -Listen <%= @puppet_passenger_port %>
  -
  -<VirtualHost *:<%= @puppet_passenger_port %>>
  -  ServerName <%= @puppet_site %>
   
     SSLProtocol -ALL +SSLv3 +TLSv1
     SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
  
positive.code: 
    ProxyPassMatch ^/([^/]+/certificate.*)$ <%= @puppet_central_ca %>/$1
  <% end -%>
  </VirtualHost>
  
  
negative.code:   RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e
  
    RackBaseURI /
    <Directory /etc/puppet/rack/>
      Options None
  