slapos-master: Keep compatibility when shared ca is used

   This might be refactored in short future with caucase, however for now this change is required to
   slapos master works.

software/slapos-master/apache-backend.conf.in

@@ -114,9 +114,11 @@ SSLVerifyClient optional
 RequestHeader set REMOTE_USER %{SSL_CLIENT_S_DN_CN}s
 RequestHeader set SSL_CLIENT_SERIAL "%{SSL_CLIENT_M_SERIAL}s"
 SSLCACertificateFile {{ parameter_dict['ca-cert'] }}
-{%   if parameter_dict['crl'] -%}
+{%   if not parameter_dict['shared-ca-cert'] %}
+{%     if parameter_dict['crl'] -%}
 SSLCARevocationCheck chain
 SSLCARevocationFile {{ parameter_dict['crl'] }}
+{%-     endif %}
 {%-   endif %}
 {%- endif %}
 

software/slapos-master/buildout.hash.cfg

@@ -23,4 +23,4 @@ md5sum = 257467e676f74c1601fd09d33968fbc3
 
 [template-apache-backend-conf]
 filename = apache-backend.conf.in
-md5sum = 991bfcc4b6abae2ec59b69d71013e8ad
+md5sum = 516143f5e8a3032a7b7b82741d3a46b7