Andrew Bogott has submitted this change and it was merged. Change subject: Update tls_allowed_dn_list again ......................................................................
Update tls_allowed_dn_list again The dn for our new CA cert is slightly different from the old one. Bug T96291 Change-Id: I281b2da39d1363a26d26f8eac6f90b2a830a12ec --- M modules/openstack/templates/common/nova/libvirtd.conf.erb 1 file changed, 1 insertion(+), 1 deletion(-) Approvals: Andrew Bogott: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/openstack/templates/common/nova/libvirtd.conf.erb b/modules/openstack/templates/common/nova/libvirtd.conf.erb index a8d2c51..dd9226e 100644 --- a/modules/openstack/templates/common/nova/libvirtd.conf.erb +++ b/modules/openstack/templates/common/nova/libvirtd.conf.erb @@ -218,7 +218,7 @@ # entirely rather than using empty list to disable these checks # # By default, no DN's are checked -tls_allowed_dn_list = ["C=US,ST=California,L=San Francisco,O=Wikimedia Foundation,CN=virt*.<%= site %>.wmnet", "C=US,ST=California,L=San Francisco,O=Wikimedia Foundation,CN=labvirt*.<%= site %>.wmnet"] +tls_allowed_dn_list = ["C=US,ST=California,O=Wikimedia Foundation,OU=Operations,CN=virt*.<%= site %>.wmnet", "C=US,ST=California,O=Wikimedia Foundation,OU=Operations,CN=labvirt*.<%= site %>.wmnet"] # A whitelist of allowed SASL usernames. The format for usernames -- To view, visit https://gerrit.wikimedia.org/r/204767 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I281b2da39d1363a26d26f8eac6f90b2a830a12ec Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org> Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
