GitLab

(IAC-1186) Add new $use_servername_for_filenames parameter

Prior to this commit, the `$filename` variable, which is used to
construct the filename of Apache's various config and log files,
obtained it's default value from the `$name` parameter.

As #2064 highlights, it is possible for `$name` to contain spaces
in it and this can cause cumbersome log file names, albeit POSIX
compliant.

Also related is #2068, which changes the `$filename` variable source
from `$name` to `$servername`. This arguably seems more appropriate,
especially given that `$servername` defaults to `$name` if undefined.

This commit attempts to create a satisfactory solution to both #2064
and #2068 by introducing the `$use_servername_for_filenames` param.
When set to `true`, a sanitized `$servername` parameter value will be
used to construct `$filename`.

When undefined or set to `$false`, it will retain the existing
behaviour and use the `$name` parameter value.

This will default to `false` until the next major release (v6.0.0),
after which it will default to `true`. Then, in the subsequent major
release (v7.0.0) it will be deprecated altogether and the default
behaviour will be to use the sanitized value of `$servername` for the
`$filename` var.

Warning messages are output to the console to alert users of this
change in behaviour.

Allow relative paths in oidc_redirect_uri

Add ssl_proxy_machine_cert_chain param to vhost class

Add missing tests for RHEL 8

WIP: Support mod_auth_gssapi parameters

Change icon path

mod_auth_gssapi parameters can only used inside a directory section of a vhost.

Parameters are specified as a hash `gssapi` to the directories parameter.

Currently only the three obvious parameters are supported, adding extra ones is a
trivial addition to the `_gssapi.epp` template.

Example

```puppet
include apache::mod::auth_gssapi
apache::vhost { 'sample.example.net':
  docroot     => '/path/to/directory',
  directories => [
    { path   => '/path/to/different/dir',
      gssapi => {
        credstore => 'keytab:/foo/bar.keytab',
        localname => 'Off',
        sslonly   => 'On',
      }
    },
  ],
```

These 3 values match to an apache configuration of

```config
<Directory /path/to/directory>
  GssapiSSLonly Off
  GssapiLocalName On
  GssapiCredStore keytab:/foo/bar.keytab
</Directory>
```

https://github.com/gssapi/mod_auth_gssapi#gssapisslonly

Use Ruby 2.7 compatible string matching

Resolve easy puppet-lint notices

Use Ruby 2.7 compatible string matching

(IAC-1187) - Release version 5.6.0 Mergeback

Added the Apache vhost proxy config option
SSLProxyMachineCertificateChainFile.

Reference: https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslproxymachinecertificatechainfile

make apache::mod::fcgid redhat 8 compatible

before -> rhel 8 fcgid.load is loaded before unixd.load  which causes httpd to fail

Replace some occurrences of non-ASCII chars

Fix typos including consecutive occurrences of 'the'

(maint) Use 'policycoreutils-python-utils' on RHEL 8

Add an additional reference that was missed in https://github.com/puppetlabs/puppetlabs-apache/pull/2065

(maint) Use 'policycoreutils-python-utils' on RHEL 8

The `policycoreutils-python` has now been replaced by the `policycoreutils-python-utils`
on RHEL 8 according to [this documentation](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/considerations_in_adopting_rhel_8/index#selinux-python3_security)

Configure default shared lib path for mod_wsgi on RHEL8

RHEL8:
  # rpm -ql python3-mod_wsgi | grep \.so$
  /usr/lib64/httpd/modules/mod_wsgi_python3.so

RHEL7:
  # rpm -ql mod_wsgi | grep \.so$
  /usr/lib64/httpd/modules/mod_wsgi.so

pdksync - (feat) - Removal of inappropriate terminology

Various enhancements to apache::mod::passenger

Point to the latest documentation available.  The old documentation is
not updated in respect to the latest passenger releases, so for
consistency update all links to point to the new documenation.