Make copr-be pick up its new cert
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
parent
ac7b6a63c4
commit
d0f4b4f262
2 changed files with 5 additions and 12 deletions
|
@ -453,8 +453,8 @@ server.upload-dirs = ( "/var/tmp" )
|
|||
|
||||
$SERVER["socket"] == ":443" {
|
||||
ssl.engine = "enable"
|
||||
ssl.pemfile = "/etc/lighttpd/copr-be.fedoraproject.org.pem"
|
||||
ssl.ca-file = "/etc/lighttpd/DigiCertCA.crt"
|
||||
ssl.pemfile = "/etc/lighttpd/copr.fedorainfracloud.org.crt"
|
||||
ssl.ca-file = "/etc/lighttpd/copr.fedorainfracloud.org.intermediate.crt"
|
||||
ssl.disable-client-renegotiation = "enable"
|
||||
ssl.use-sslv2 = "disable"
|
||||
ssl.use-sslv3 = "disable"
|
||||
|
|
|
@ -1,17 +1,10 @@
|
|||
- name: copy httpd ssl certificates
|
||||
copy: src="{{ private }}/files/httpd/{{ item }}" dest="/etc/lighttpd/{{ item }}" owner=root group=root mode=0600
|
||||
with_items:
|
||||
- copr-be.fedoraproject.org.key
|
||||
- copr-be.fedoraproject.org.crt
|
||||
- copr-be.fedoraproject.org.pem
|
||||
- copr.fedoraproject.org.key
|
||||
- copr.fedoraproject.org.crt
|
||||
- copr.fedoraproject.org.intermediate.crt
|
||||
notify:
|
||||
- restart lighttpd
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: copy httpd ssl certificates (CAcert)
|
||||
copy: src="DigiCertCA.crt" dest="/etc/lighttpd/" owner=root group=root mode=0600
|
||||
tags:
|
||||
- config
|
||||
notify:
|
||||
- restart lighttpd
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue