BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/284817
Change subject: librenms: use chain cert correctly
......................................................................
librenms: use chain cert correctly
Before this, librenms.wm.o was sending the root cert in the trust
chain pointlessly. This switches the cert config to match how we
do other apache one-off sites, which doesn't do that.
Change-Id: Ic89a8d1d3934baae327c341e144236e225057b26
---
M modules/librenms/templates/apache.conf.erb
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/17/284817/1
diff --git a/modules/librenms/templates/apache.conf.erb
b/modules/librenms/templates/apache.conf.erb
index e13a43e..009a903 100644
--- a/modules/librenms/templates/apache.conf.erb
+++ b/modules/librenms/templates/apache.conf.erb
@@ -11,8 +11,8 @@
SSLEngine on
SSLCertificateFile /etc/ssl/localcerts/<%= @sitename %>.crt
+ SSLCertificateChainFile /etc/ssl/localcerts/<%= @sitename %>.chain.crt
SSLCertificateKeyFile /etc/ssl/private/<%= @sitename %>.key
- SSLCACertificatePath /etc/ssl/certs
<%= @ssl_settings.join("\n") %>
DocumentRoot <%= @install_dir %>/html
--
To view, visit https://gerrit.wikimedia.org/r/284817
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic89a8d1d3934baae327c341e144236e225057b26
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
