summaryrefslogtreecommitdiffstats
path: root/httpd.service.xml
diff options
context:
space:
mode:
Diffstat (limited to 'httpd.service.xml')
-rw-r--r--httpd.service.xml16
1 files changed, 16 insertions, 0 deletions
diff --git a/httpd.service.xml b/httpd.service.xml
index 8f82e59..d851862 100644
--- a/httpd.service.xml
+++ b/httpd.service.xml
@@ -37,12 +37,14 @@
<refnamediv>
<refname>httpd.service</refname>
<refname>httpd.socket</refname>
+ <refname>httpd-init.service</refname>
<refpurpose>httpd unit files for systemd</refpurpose>
</refnamediv>
<refsynopsisdiv>
<para>
<filename>/usr/lib/systemd/system/httpd.service</filename>,
+ <filename>/usr/lib/systemd/system/httpd-init.service</filename>,
<filename>/usr/lib/systemd/system/httpd.socket</filename>
</para>
</refsynopsisdiv>
@@ -125,6 +127,20 @@ Wants=network-online.target</programlisting>
</refsect2>
<refsect2>
+ <title>SSL/TLS certificate generation</title>
+
+ <para>The <command>httpd-init.service</command> unit is provided
+ with the mod_ssl package. This oneshot unit automatically
+ creates a TLS server certificate and key (using a generated
+ self-signed CA certificate and key) for testing purposes before
+ httpd is started. To inhibit certificate generation, use
+ <command>systemctl mask httpd-init.service</command> after
+ installing mod_ssl, and adjust the mod_ssl configuration to use
+ an appropriate certicate and key.</para>
+
+ </refsect2>
+
+ <refsect2>
<title>Reloading and stopping the service</title>
<para>When running <command>systemctl reload