From 0eef482c7b95097d0aad8a1cd31846732d677709 Mon Sep 17 00:00:00 2001
From: Trevor Batley <trevor@batley.id.au>
Date: Thu, 31 Aug 2023 09:51:35 +1000
Subject: [PATCH] Tweak ssl.conf settings

---
 koji-setup/deploy-koji.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/koji-setup/deploy-koji.sh b/koji-setup/deploy-koji.sh
index 465d78e..2d14b10 100755
--- a/koji-setup/deploy-koji.sh
+++ b/koji-setup/deploy-koji.sh
@@ -292,12 +292,12 @@ SSLRandomSeed connect builtin
     SSLCertificateKeyFile $KOJI_PKI_DIR/private/kojihub.key
     SSLCertificateChainFile $KOJI_PKI_DIR/koji_ca_cert.crt
     SSLCACertificateFile $KOJI_PKI_DIR/koji_ca_cert.crt
-    SSLVerifyClient optional
+    SSLVerifyClient require
     SSLVerifyDepth 10
 
-    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
+    <FilesMatch "\.(cgi|shtml|phtml|php3?)$">
         SSLOptions +StdEnvVars
-    </Files>
+    </FilesMatch>
     <Directory "/var/www/cgi-bin">
         SSLOptions +StdEnvVars
     </Directory>