Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

(stunnel) use a combined cert.

Browse source
This commit is contained in:
Ralph Bean 2015-03-17 14:45:25 +00:00
parent 88f1f35b1d
commit 63d93036b3
2 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/fedmsg/gateway/slave/tasks/main.yml
View file

@ -73,6 +73,16 @@
- fedmsg/gateway - fedmsg/gateway
- fedmsg/gateway/slave - fedmsg/gateway/slave
- name: put our combined cert in place
copy: >
src={{private}}/httpd/wildcard-2014.fedoraproject.org.combined.cert
dest=/etc/pki/tls/certs/wildcard-2014.fedoraproject.org.combined.cert
owner=root group=root mode=0644
notify: restart stunnel
tags:
- fedmsg/gateway
- fedmsg/gateway/slave
- name: start the gateway for raw zeromq traffic - name: start the gateway for raw zeromq traffic
service: name=fedmsg-gateway state=started enabled=yes service: name=fedmsg-gateway state=started enabled=yes
tags: tags:

2
roles/fedmsg/gateway/slave/templates/stunnel-conf.j2
View file

@ -1,4 +1,4 @@
cert = /etc/pki/tls/certs/wildcard-2014.fedoraproject.org.cert cert = /etc/pki/tls/certs/wildcard-2014.fedoraproject.org.combined.cert
key = /etc/pki/tls/private/wildcard-2014.fedoraproject.org.key key = /etc/pki/tls/private/wildcard-2014.fedoraproject.org.key
pid = /var/run/stunnel.pid pid = /var/run/stunnel.pid