Dzahn has submitted this change and it was merged.

Change subject: beta: do not use private key for star.wmflabs.org cert
......................................................................


beta: do not use private key for star.wmflabs.org cert

Apparently that might fix the issue with nginx not starting because the
key is invalid for star.wmflabs.org.

Change-Id: I30d5368a66580ec544af036b71faef8b4af39b82
---
M manifests/role/protoproxy.pp
1 file changed, 3 insertions(+), 1 deletion(-)

Approvals:
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/manifests/role/protoproxy.pp b/manifests/role/protoproxy.pp
index 3c1a33f..50a21e4 100644
--- a/manifests/role/protoproxy.pp
+++ b/manifests/role/protoproxy.pp
@@ -314,7 +314,9 @@
         certificates::wmf_labs_ca,
         role::protoproxy::ssl::common
 
-    install_certificate { 'star.wmflabs.org': }
+    install_certificate { 'star.wmflabs.org':
+        privatekey => false,
+    }
 
 }
 

-- 
To view, visit https://gerrit.wikimedia.org/r/126252
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I30d5368a66580ec544af036b71faef8b4af39b82
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <has...@free.fr>
Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Hashar <has...@free.fr>
Gerrit-Reviewer: Yuvipanda <yuvipa...@gmail.com>
Gerrit-Reviewer: coren <mpellet...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to