Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/93617
Change subject: fix bugzilla SSL cert in puppet
......................................................................
fix bugzilla SSL cert in puppet
we're still using the star.wm cert all this time, so this is not a
real change.
this is to prevent Apache breakage until RT #5011 is resolved.
puppet did not restart Apache.
we just got a new bug-attachment.wm.org cert today, which is now
actually used, as opposed to before.
the bugzilla.wm.org cert though is the old one from 2008,
so this would have caused expiration warnings for users.
in this state puppet can run and Apache can be restarted though.
Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
---
M files/apache/sites/bugzilla.wikimedia.org
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/17/93617/1
diff --git a/files/apache/sites/bugzilla.wikimedia.org
b/files/apache/sites/bugzilla.wikimedia.org
index 2be0b49..0948c25 100644
--- a/files/apache/sites/bugzilla.wikimedia.org
+++ b/files/apache/sites/bugzilla.wikimedia.org
@@ -45,8 +45,8 @@
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite
AES128-GCM-SHA256:RC4-SHA:RC4-MD5:DES-CBC3-SHA:AES128-SHA:AES256-SHA
SSLHonorCipherOrder on
- SSLCertificateFile /etc/ssl/certs/bugzilla.wikimedia.org.pem
- SSLCertificateKeyFile /etc/ssl/private/bugzilla.wikimedia.org.key
+ SSLCertificateFile /etc/ssl/certs/star.wikimedia.org.pem
+ SSLCertificateKeyFile /etc/ssl/private/star.wikimedia.org.key
SSLCACertificatePath /etc/ssl/certs/
RewriteEngine On
--
To view, visit https://gerrit.wikimedia.org/r/93617
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits