Dzahn has submitted this change and it was merged.

Change subject: fix bugzilla SSL cert in puppet
......................................................................


fix bugzilla SSL cert in puppet

we're still using the star.wm cert all this time, so this is not a
real change.

this is to prevent Apache breakage until RT #5011 is resolved.
puppet did not restart Apache.

we just got a new bug-attachment.wm.org cert today, which is now
actually used, as opposed to before.

the bugzilla.wm.org cert though is the old one from 2008,
so this would have caused expiration warnings for users.

in this state puppet can run and Apache can be restarted though.

Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
---
M files/apache/sites/bugzilla.wikimedia.org
1 file changed, 2 insertions(+), 2 deletions(-)

Approvals:
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/files/apache/sites/bugzilla.wikimedia.org 
b/files/apache/sites/bugzilla.wikimedia.org
index 2be0b49..0948c25 100644
--- a/files/apache/sites/bugzilla.wikimedia.org
+++ b/files/apache/sites/bugzilla.wikimedia.org
@@ -45,8 +45,8 @@
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite 
AES128-GCM-SHA256:RC4-SHA:RC4-MD5:DES-CBC3-SHA:AES128-SHA:AES256-SHA
        SSLHonorCipherOrder on
-       SSLCertificateFile /etc/ssl/certs/bugzilla.wikimedia.org.pem
-       SSLCertificateKeyFile /etc/ssl/private/bugzilla.wikimedia.org.key
+       SSLCertificateFile /etc/ssl/certs/star.wikimedia.org.pem
+       SSLCertificateKeyFile /etc/ssl/private/star.wikimedia.org.key
        SSLCACertificatePath /etc/ssl/certs/
 
        RewriteEngine On

-- 
To view, visit https://gerrit.wikimedia.org/r/93617
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: jenkins-bot

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to