CVE-2017-2299

The CVE-2017-2299 issue affects the puppetlabs-apache module versions prior to 1.11.1 and 2.1.0. If ssl_ca is set but ssl_certs_dir is not, a default ssl_certs_dir is chosen that trusts certificates from any system-trusted CA, potentially misconfiguring TLS trust. This did not affect FreeBSD. Rem...