BBlack has submitted this change and it was merged. Change subject: enable OCSP for misc cluster certs T97506 ......................................................................
enable OCSP for misc cluster certs T97506 Change-Id: Ie804f1d3a1a46badcf5b0fc16b3c81b4b3b6d950 --- M modules/role/manifests/cache/ssl/misc.pp 1 file changed, 3 insertions(+), 0 deletions(-) Approvals: BBlack: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/role/manifests/cache/ssl/misc.pp b/modules/role/manifests/cache/ssl/misc.pp index dc05073..92945ce 100644 --- a/modules/role/manifests/cache/ssl/misc.pp +++ b/modules/role/manifests/cache/ssl/misc.pp @@ -6,6 +6,7 @@ include role::protoproxy::ssl::common role::cache::ssl::local { 'wikimedia.org': + do_ocsp => true, certname => 'sni.wikimedia.org', server_name => 'wikimedia.org', server_aliases => ['*.wikimedia.org'], @@ -13,12 +14,14 @@ } role::cache::ssl::local { 'wmfusercontent.org': + do_ocsp => true, certname => 'star.wmfusercontent.org', server_name => 'wmfusercontent.org', server_aliases => ['*.wmfusercontent.org']; } role::cache::ssl::local { 'planet.wikimedia.org': + do_ocsp => true, certname => 'star.planet.wikimedia.org', server_name => 'planet.wikimedia.org', server_aliases => ['*.planet.wikimedia.org']; -- To view, visit https://gerrit.wikimedia.org/r/212257 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ie804f1d3a1a46badcf5b0fc16b3c81b4b3b6d950 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: BBlack <bbl...@wikimedia.org> Gerrit-Reviewer: BBlack <bbl...@wikimedia.org> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits