We have a request at: 
https://fedorahosted.org/fedora-infrastructure/ticket/3535
to allow https for ask.fedoraproject.org. 

This is a pretty simple change: 

diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp
index df0a733..af80b44 100644
--- a/manifests/services/proxy.pp
+++ b/manifests/services/proxy.pp
@@ -351,7 +351,9 @@ class proxy {
     httpd::website { "ask.fedoraproject.org":
         ips            => $wildcard_fpo_ips,
         server_aliases => [ "ask.stg.fedoraproject.org" ],
-        ssl            => false,
+        ssl            => true,
+        cert_name      => "wildcard.fedoraproject.org",
+        sSLCertificateChainFile => 
"wildcard.fedoraproject.org.intermediate.cert",
     }
 
     httpd::website { "darkserver.fedoraproject.org":

Any +1's? Or should we just wait until after freeze?

kevin

Attachment: signature.asc
Description: PGP signature

_______________________________________________
infrastructure mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/infrastructure

Reply via email to