BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/175040
Change subject: use GlobalSign CA for all sni.* cert names
......................................................................
use GlobalSign CA for all sni.* cert names
Change-Id: Icd6655385f0d6b80c060df8a783d6bd1bad314c5
---
M manifests/certs.pp
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/40/175040/1
diff --git a/manifests/certs.pp b/manifests/certs.pp
index b931003..915fa01 100644
--- a/manifests/certs.pp
+++ b/manifests/certs.pp
@@ -167,6 +167,7 @@
# or will not properly have SSL enabled.
$cas = $name ? {
# NOTE: Those use .pem filenames
+ /^sni\./ => 'GlobalSign_CA.pem',
'unified.wikimedia.org' => 'DigiCertHighAssuranceCA-3.pem',
'star.wikimedia.org' => 'RapidSSL_CA.pem
RapidSSL_CA_2.pem GeoTrust_Global_CA.pem',
'star.wikipedia.org' => 'DigiCertHighAssuranceCA-3.pem
DigiCert_High_Assurance_EV_Root_CA.pem',
@@ -182,7 +183,6 @@
'star.wmflabs' => 'wmf-labs.pem',
'star.planet.wikimedia.org' => 'DigiCertHighAssuranceCA-3.pem
DigiCert_High_Assurance_EV_Root_CA.pem',
'star.wmfusercontent.org' => 'GlobalSign_CA.pem',
- 'sni.wikimedia.org' => 'GlobalSign_CA.pem',
default => 'wmf-ca.pem',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/175040
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Icd6655385f0d6b80c060df8a783d6bd1bad314c5
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
