Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Move to using new certs for fedorapeople

Browse source 
Get new certs per instructions
Put new certs in ansible_private from letsencrypt
Change the cert name in configs to 2023 to show different from 2017 one.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
This commit is contained in:
Stephen Smoogen 2023-01-05 12:50:34 -05:00
parent 5e75fa84c6
commit 69ba9efed8
3 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/planet/templates/planet.conf
View file

@ -67,7 +67,7 @@
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/planet.fedoraproject.org.cert
SSLCertificateKeyFile /etc/pki/tls/private/planet.fedoraproject.org.key
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2017.fedorapeople.org.intermediate.cert
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2023.fedorapeople.org.intermediate.cert
SSLHonorCipherOrder On
SSLProtocol {{ ssl_protocols }}
SSLCipherSuite {{ ssl_ciphers }}