Freeze break request: allow https with ask.fedoraproject.org

Kevin Fenzi kevin at scrye.com
Mon Oct 29 18:24:35 UTC 2012


We have a request at: 
https://fedorahosted.org/fedora-infrastructure/ticket/3535
to allow https for ask.fedoraproject.org. 

This is a pretty simple change: 

diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp
index df0a733..af80b44 100644
--- a/manifests/services/proxy.pp
+++ b/manifests/services/proxy.pp
@@ -351,7 +351,9 @@ class proxy {
     httpd::website { "ask.fedoraproject.org":
         ips            => $wildcard_fpo_ips,
         server_aliases => [ "ask.stg.fedoraproject.org" ],
-        ssl            => false,
+        ssl            => true,
+        cert_name      => "wildcard.fedoraproject.org",
+        sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert",
     }
 
     httpd::website { "darkserver.fedoraproject.org":

Any +1's? Or should we just wait until after freeze?

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20121029/04f386df/attachment.sig>


More information about the infrastructure mailing list