Rudder

Proposal:

- Change /etc/apache2/sites-enabled/rudder-default to /etc/apache2/sites-enabled/rudder-ssl

- Edit /etc/apache2/sites-enabled/rudder-ssl

#<VirtualHost *:80>
<VirtualHost *:443>
        ServerAdmin webmaster@localhost

        SSLEngine on
        SSLCertificateFile /etc/ssl/certs/server.crt
        SSLCertificateKeyFile /etc/ssl/private/server.key

- Create /etc/apache2/sites-enabled/rudder-default

<VirtualHost *:80>
  ServerName rudder
  Redirect permanent / https://rudder/
</VirtualHost>

For the certificates, you can use:

- a self-signed certificate, generated by Normation
- a machine provided snakeoil certificate, and then advise the user to possibly replace it with their own (self-signed) certificate