https://bugzilla.wikimedia.org/show_bug.cgi?id=48501

--- Comment #86 from Antoine "hashar" Musso <[email protected]> ---

The beta cluster has for Varnish instances with a Nginx HTTPS proxy installed. 
Nginx refuses to start because the star.wmflabs.org certificate is invalid:

root@deployment-cache-bits01:~# /etc/init.d/nginx start
Starting nginx: nginx: [emerg]
  SSL_CTX_use_PrivateKey_file("/etc/ssl/private/star.wmflabs.org.key")
  failed (SSL: error:0B080074:x509 certificate
routines:X509_check_private_key:key values mismatch)
 nginx: configuration file /etc/nginx/nginx.conf test failed


To fix it we would need a few certificates to be installed on the instances via
the role::protoproxy::ssl::beta puppet class in manifests/role/protoproxy.pp

star.wmflabs.org would cover the entries:

 bits.beta.wmflabs.org
 upload.beta.wmflabs.org
 wikidata.beta.wmflabs.org

We would need *.wikimedia.beta.wmflabs.org and *.wikipedia.beta.wmflabs.org
certs as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to