BBlack has submitted this change and it was merged.
Change subject: remove OCSP for planet.wm.o cert (borked)
......................................................................
remove OCSP for planet.wm.o cert (borked)
The OCSP servers for the planet cert don't return responses that
OpenSSL likes. ssllabs.com doesn't like them either when
presented to clients. No idea if any real clients accept
responses of this form, but disabling anyways for now.
Change-Id: I2b8de1d6ca1d977e3f95361ab3533d8beb23301a
---
M modules/role/manifests/cache/ssl/misc.pp
1 file changed, 0 insertions(+), 1 deletion(-)
Approvals:
BBlack: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/role/manifests/cache/ssl/misc.pp
b/modules/role/manifests/cache/ssl/misc.pp
index 79e25b3..b1fdf48 100644
--- a/modules/role/manifests/cache/ssl/misc.pp
+++ b/modules/role/manifests/cache/ssl/misc.pp
@@ -14,7 +14,6 @@
}
role::cache::ssl::local { 'planet.wikimedia.org':
- do_ocsp => true,
certs => ['star.planet.wikimedia.org'],
server_name => 'planet.wikimedia.org',
server_aliases => ['*.planet.wikimedia.org'];
--
To view, visit https://gerrit.wikimedia.org/r/224415
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I2b8de1d6ca1d977e3f95361ab3533d8beb23301a
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
