RobH has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/106773


Change subject: git.wikimedia.org missing CAPath
......................................................................

git.wikimedia.org missing CAPath

the missing capath configuration option was causing chained issue cert
errors for labs users attempting to hit git.wikimedia.org

Bug:59910
Change-Id: Ifa14a394e4c903565c1e0f6dcfbdebd172c621e6
---
M templates/apache/sites/git.wikimedia.org.erb
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/73/106773/1

diff --git a/templates/apache/sites/git.wikimedia.org.erb 
b/templates/apache/sites/git.wikimedia.org.erb
index 60abc56..eb0ecb1 100644
--- a/templates/apache/sites/git.wikimedia.org.erb
+++ b/templates/apache/sites/git.wikimedia.org.erb
@@ -50,6 +50,7 @@
        SSLCertificateFile /etc/ssl/certs/<%= ssl_cert %>.pem
        SSLCertificateChainFile /etc/ssl/certs/<%= ssl_cert %>.chained.pem
        SSLCertificateKeyFile /etc/ssl/private/<%= ssl_cert_key %>.key
+       SSLCACertificatePath /etc/ssl/certs/
 
        RequestHeader set X-Forwarded-Proto https
        RequestHeader set X-Forwarded-Port 443

-- 
To view, visit https://gerrit.wikimedia.org/r/106773
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ifa14a394e4c903565c1e0f6dcfbdebd172c621e6
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: RobH <r...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to