Dzahn has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/93617


Change subject: fix bugzilla SSL cert in puppet
......................................................................

fix bugzilla SSL cert in puppet

we're still using the star.wm cert all this time, so this is not a
real change.

this is to prevent Apache breakage until RT #5011 is resolved.
puppet did not restart Apache.

we just got a new bug-attachment.wm.org cert today, which is now
actually used, as opposed to before.

the bugzilla.wm.org cert though is the old one from 2008,
so this would have caused expiration warnings for users.

in this state puppet can run and Apache can be restarted though.

Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
---
M files/apache/sites/bugzilla.wikimedia.org
1 file changed, 2 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/17/93617/1

diff --git a/files/apache/sites/bugzilla.wikimedia.org 
b/files/apache/sites/bugzilla.wikimedia.org
index 2be0b49..0948c25 100644
--- a/files/apache/sites/bugzilla.wikimedia.org
+++ b/files/apache/sites/bugzilla.wikimedia.org
@@ -45,8 +45,8 @@
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite 
AES128-GCM-SHA256:RC4-SHA:RC4-MD5:DES-CBC3-SHA:AES128-SHA:AES256-SHA
        SSLHonorCipherOrder on
-       SSLCertificateFile /etc/ssl/certs/bugzilla.wikimedia.org.pem
-       SSLCertificateKeyFile /etc/ssl/private/bugzilla.wikimedia.org.key
+       SSLCertificateFile /etc/ssl/certs/star.wikimedia.org.pem
+       SSLCertificateKeyFile /etc/ssl/private/star.wikimedia.org.key
        SSLCACertificatePath /etc/ssl/certs/
 
        RewriteEngine On

-- 
To view, visit https://gerrit.wikimedia.org/r/93617
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to