BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/198388
Change subject: test OCSP Stapling on cp1008
......................................................................
test OCSP Stapling on cp1008
Bug: T86666
Change-Id: I299a2730dd4f8fa306ac27270dd2253c9e5377e8
---
M manifests/role/cache.pp
1 file changed, 10 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/88/198388/1
diff --git a/manifests/role/cache.pp b/manifests/role/cache.pp
index c3193b0..b1071b8 100644
--- a/manifests/role/cache.pp
+++ b/manifests/role/cache.pp
@@ -654,9 +654,18 @@
include certificates::wmf_ca_2014_2017
include role::protoproxy::ssl::common
+ # Test OCSP on cp1008 only initially
+ if $::hostname == 'cp1008' {
+ $ocsp_test = true
+ }
+ else {
+ $ocsp_test = false
+ }
+
localssl { 'unified':
certname => 'uni.wikimedia.org',
default_server => true,
+ do_ocsp => $ocsp_test,
}
define sni_cert() {
@@ -664,6 +673,7 @@
certname => "sni.${name}",
server_name => $name,
server_aliases => ["*.${name}"],
+ do_ocsp => $ocsp_test,
}
}
--
To view, visit https://gerrit.wikimedia.org/r/198388
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I299a2730dd4f8fa306ac27270dd2253c9e5377e8
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <bbl...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
