diff --git a/roles/robosignatory/files/koji.conf b/roles/robosignatory/files/koji.conf index 09c535a6a2..64b78f1f31 100644 --- a/roles/robosignatory/files/koji.conf +++ b/roles/robosignatory/files/koji.conf @@ -1,6 +1,6 @@ [koji] -server = http://koji.fedoraproject.org/kojihub -weburl = http://koji.fedoraproject.org/koji +server = https://koji.fedoraproject.org/kojihub +weburl = https://koji.fedoraproject.org/koji topurl = https://kojipkgs.fedoraproject.org/ anon_retry = false cert = /etc/robosignatory/koji.cert diff --git a/roles/robosignatory/files/robosignatory.production.py b/roles/robosignatory/files/robosignatory.production.py index d084e28beb..188345ed89 100644 --- a/roles/robosignatory/files/robosignatory.production.py +++ b/roles/robosignatory/files/robosignatory.production.py @@ -11,7 +11,7 @@ config = { 'robosignatory.enabled.tagsigner': True, 'robosignatory.enabled.atomicsigner': True, - 'robosignstory.signing': { + 'robosignatory.signing': { 'backend': 'sigul', 'user': 'autopen', 'passphrase_file': '/etc/sigul/autosign.pass', @@ -26,7 +26,8 @@ config = { # Only ssl is supported at the moment 'authmethod': 'kerberos', 'principal': 'autosign/autosign01.phx2.fedoraproject.org@FEDORAPROJECT.ORG', - 'keytab': '/etc/krb5.autosign_autosign01.phx2.fedoraproject.org.keytab' + 'keytab': '/etc/krb5.autosign_autosign01.phx2.fedoraproject.org.keytab', + 'krb_rdns': False }, 'tags': [ # Temporary tags