From 7dd1f05bb41a984fbb857d561536862ef14828e8 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Wed, 15 Aug 2018 19:34:48 +0000
Subject: [PATCH] try and copy cert from proxy01 to pkgs

---
 roles/distgit/tasks/main.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/roles/distgit/tasks/main.yml b/roles/distgit/tasks/main.yml
index 344ca5d147..fb62b8d012 100644
--- a/roles/distgit/tasks/main.yml
+++ b/roles/distgit/tasks/main.yml
@@ -347,6 +347,19 @@
   notify:
   - reload httpd
 
+# Get the letsencrypt ssl cert for pkgs.fedoraproject.org from proxy01
+# It's stored there because the role that requests/updates it is called
+# via the proxy playbooks.
+
+- name: copy pkgs.fedoraproject.org ssl cert to pkgs machine
+  synchronize:
+    src: {{ item }}
+    dest: {{ item }}
+  with_items:
+  - /etc/pki/tls/certs/pkgs.fedoraproject.org.cert
+  - /etc/pki/tls/certs/pkgs.fedoraproject.org.intermediate.cert
+  - /etc/pki/tls/private/pkgs.fedoraproject.org.key
+  delegate_to: proxy01.phx2.fedoraproject.org
 
 # -- Lookaside Cache -------------------------------------
 # This is the annex to Dist Git, where we host source tarballs.