From bec6a5f91d9c4979575b87e76c56204e59598d46 Mon Sep 17 00:00:00 2001
From: Tim Bishop <tim@bishnet.net>
Date: Wed, 2 Jul 2014 23:39:52 +0100
Subject: [PATCH] Allow ssl_certs_dir to be unset.

In some cases we don't want SSLCACertificatePath to be set at all.
If we're using SSLCACertificateFile instead to verify clients we
might want that to be the only CA used. Most other options in this
template are optional, so I don't see why this one can't be too.
---
 templates/vhost/_ssl.erb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/templates/vhost/_ssl.erb b/templates/vhost/_ssl.erb
index 03c78ef42..174f0a189 100644
--- a/templates/vhost/_ssl.erb
+++ b/templates/vhost/_ssl.erb
@@ -7,7 +7,9 @@
 <% if @ssl_chain -%>
   SSLCertificateChainFile "<%= @ssl_chain %>"
 <% end -%>
+<% if @ssl_certs_dir -%>
   SSLCACertificatePath    "<%= @ssl_certs_dir %>"
+<% end -%>
 <% if @ssl_ca -%>
   SSLCACertificateFile    "<%= @ssl_ca %>"
 <% end -%>