Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Update the ssl cert config for ci-cc

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2018-10-31 17:40:22 +01:00
parent bac7d2f11e
commit 02e3228d73
1 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/ci_resultsdb/templates/cert.conf
View file

@ -1,5 +1,19 @@
<VirtualHost *:80>
ServerName resultsdb.ci.centos.org
ProxyPass "/.well-known/acme-challenge" "http://certgetter01/.well-known/acme-challenge"
RewriteEngine on
RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L]
</VirtualHost>
<VirtualHost *:443>
ServerName resultsdb.ci.centos.org
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/resultsdb.ci.centos.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/resultsdb.ci.centos.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/resultsdb.ci.centos.org/fullchain.pem
SSLHonorCipherOrder On
SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL
SSLProtocol ALL -SSLv2
</VirtualHost>