Faidon Liambotis has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/121283

Change subject: ldap: switch CA name to Equifax_Secure_CA
......................................................................

ldap: switch CA name to Equifax_Secure_CA

RapidSSL is only an intermediate certificate. The full chain is
RapidSSL -> GeoTrust Global -> Equifax. Set "ca_name" (i.e. what
check_cert checks) to Equifax.

Change-Id: I5cacf3ea289d19e671971f705cd796e1fb5f34cb
---
M modules/ldap/manifests/role/server.pp
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/83/121283/1

diff --git a/modules/ldap/manifests/role/server.pp 
b/modules/ldap/manifests/role/server.pp
index 61afbfd..608b962 100644
--- a/modules/ldap/manifests/role/server.pp
+++ b/modules/ldap/manifests/role/server.pp
@@ -18,7 +18,7 @@
             $ca_name = 'wmf-labs.pem'
         }
         'production': {
-            $ca_name = 'RapidSSL_CA.pem'
+            $ca_name = 'Equifax_Secure_CA.pem'
                 case $::hostname {
                     'virt0': {
                         $certificate = 'virt0.wikimedia.org'

-- 
To view, visit https://gerrit.wikimedia.org/r/121283
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I5cacf3ea289d19e671971f705cd796e1fb5f34cb
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Faidon Liambotis <fai...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to