BBlack has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/224113

Change subject: parsoid SSL: remove pointless SNI, add OCSP
......................................................................

parsoid SSL: remove pointless SNI, add OCSP

Change-Id: I778de52b75112261a22da7de96bbacb6e1ea400c
---
M modules/role/manifests/cache/ssl/parsoid.pp
1 file changed, 1 insertion(+), 10 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/13/224113/1

diff --git a/modules/role/manifests/cache/ssl/parsoid.pp 
b/modules/role/manifests/cache/ssl/parsoid.pp
index 709e367..997c7a4 100644
--- a/modules/role/manifests/cache/ssl/parsoid.pp
+++ b/modules/role/manifests/cache/ssl/parsoid.pp
@@ -2,15 +2,6 @@
     role::cache::ssl::local { 'unified':
         certs          => ['uni.wikimedia.org'],
         default_server => true,
-    }
-    role::cache::ssl::local { 'wikimedia.org':
-        certs          => ['sni.wikimedia.org'],
-        server_name    => 'wikimedia.org',
-        server_aliases => ['*.wikimedia.org'],
-    }
-    role::cache::ssl::local { 'm.wikimedia.org':
-        certs          => ['sni.m.wikimedia.org'],
-        server_name    => 'm.wikimedia.org',
-        server_aliases => ['*.m.wikimedia.org'],
+        do_ocsp        => true,
     }
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/224113
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I778de52b75112261a22da7de96bbacb6e1ea400c
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <bbl...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to