Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Move to using new certs for fedorapeople

Browse source 
Get new certs per instructions
Put new certs in ansible_private from letsencrypt
Change the cert name in configs to 2023 to show different from 2017 one.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
This commit is contained in:
Stephen Smoogen 2023-01-05 12:50:34 -05:00
parent 5e75fa84c6
commit 69ba9efed8
3 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
playbooks/groups/people.yml
View file

@ -80,8 +80,8 @@
- role: apache
- role: httpd/certificate
certname: wildcard-2017.fedorapeople.org
SSLCertificateChainFile: wildcard-2017.fedorapeople.org.intermediate.cert
certname: wildcard-2023.fedorapeople.org
SSLCertificateChainFile: wildcard-2023.fedorapeople.org.intermediate.cert
- people

6
roles/people/templates/people.conf
View file

@ -27,9 +27,9 @@ NameVirtualHost *:80
DocumentRoot /srv/people/site
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/wildcard-2017.fedorapeople.org.cert
SSLCertificateKeyFile /etc/pki/tls/private/wildcard-2017.fedorapeople.org.key
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2017.fedorapeople.org.intermediate.cert
SSLCertificateFile /etc/pki/tls/certs/wildcard-2023.fedorapeople.org.cert
SSLCertificateKeyFile /etc/pki/tls/private/wildcard-2023.fedorapeople.org.key
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2023.fedorapeople.org.intermediate.cert
SSLHonorCipherOrder On
SSLCipherSuite {{ ssl_ciphers }}
SSLProtocol {{ ssl_protocols }}

2
roles/planet/templates/planet.conf
View file

@ -67,7 +67,7 @@
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/planet.fedoraproject.org.cert
SSLCertificateKeyFile /etc/pki/tls/private/planet.fedoraproject.org.key
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2017.fedorapeople.org.intermediate.cert
SSLCertificateChainFile /etc/pki/tls/certs/wildcard-2023.fedorapeople.org.intermediate.cert
SSLHonorCipherOrder On
SSLProtocol {{ ssl_protocols }}
SSLCipherSuite {{ ssl_ciphers }}