Jcrespo has uploaded a new change for review. https://gerrit.wikimedia.org/r/256405
Change subject: Update mariadb module to the latest commit ...................................................................... Update mariadb module to the latest commit Also add comment about client's server verification. Change-Id: Idd1e0aa25e0d04b3ebb4831a5a8c1f0aa96c5c67 References: T111654 --- M modules/mariadb M templates/mariadb/production.my.cnf.erb 2 files changed, 3 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/05/256405/1 diff --git a/modules/mariadb b/modules/mariadb index 44fd087..7fef40f 160000 --- a/modules/mariadb +++ b/modules/mariadb -Subproject commit 44fd08751f4f6cfa15a6275253bf231f7533a88b +Subproject commit 7fef40f163f678af7790a0ec8b95afa3429e2234 diff --git a/templates/mariadb/production.my.cnf.erb b/templates/mariadb/production.my.cnf.erb index b57af97..c527e78 100644 --- a/templates/mariadb/production.my.cnf.erb +++ b/templates/mariadb/production.my.cnf.erb @@ -9,6 +9,9 @@ ssl-ca=/etc/mysql/ssl/cacert.pem ssl-cert=/etc/mysql/ssl/server-cert.pem ssl-key=/etc/mysql/ssl/server-key.pem +# skip server cert validation until we generate one cert per server +# it would check the cert's common name against the host +# ssl-verify-server-cert <% end %> [mysqld] -- To view, visit https://gerrit.wikimedia.org/r/256405 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Idd1e0aa25e0d04b3ebb4831a5a8c1f0aa96c5c67 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Jcrespo <jcre...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits