Make copr-be pick up its new cert

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-01-22 00:14:47 +00:00
parent ac7b6a63c4
commit d0f4b4f262
2 changed files with 5 additions and 12 deletions

View file

@ -453,8 +453,8 @@ server.upload-dirs = ( "/var/tmp" )
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/copr-be.fedoraproject.org.pem"
ssl.ca-file = "/etc/lighttpd/DigiCertCA.crt"
ssl.pemfile = "/etc/lighttpd/copr.fedorainfracloud.org.crt"
ssl.ca-file = "/etc/lighttpd/copr.fedorainfracloud.org.intermediate.crt"
ssl.disable-client-renegotiation = "enable"
ssl.use-sslv2 = "disable"
ssl.use-sslv3 = "disable"

View file

@ -1,17 +1,10 @@
- name: copy httpd ssl certificates
copy: src="{{ private }}/files/httpd/{{ item }}" dest="/etc/lighttpd/{{ item }}" owner=root group=root mode=0600
with_items:
- copr-be.fedoraproject.org.key
- copr-be.fedoraproject.org.crt
- copr-be.fedoraproject.org.pem
- copr.fedoraproject.org.key
- copr.fedoraproject.org.crt
- copr.fedoraproject.org.intermediate.crt
notify:
- restart lighttpd
tags:
- config
- name: copy httpd ssl certificates (CAcert)
copy: src="DigiCertCA.crt" dest="/etc/lighttpd/" owner=root group=root mode=0600
tags:
- config
notify:
- restart lighttpd