Freeze break request: allow https with ask.fedoraproject.org

Toshio Kuratomi a.badger at gmail.com
Mon Oct 29 23:33:32 UTC 2012


Loks good to me.

-Toshio

On Mon, Oct 29, 2012 at 04:18:20PM -0600, Kevin Fenzi wrote:
> I've tested this in stg and it seemed to work fine there except it
> wasn't able to redirect properly (since production didn't have it
> setup). 
> 
> I think this is now the change needed to enable in production: 
> 
> kevin
> --
> diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp
> index d9a7b6a..009fa3f 100644
> --- a/manifests/services/proxy.pp
> +++ b/manifests/services/proxy.pp
> @@ -348,7 +348,6 @@ class proxy {
>          sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert",
>      }
>  
> -    if $environment == "staging" {
>      httpd::website { "ask.fedoraproject.org":
>          ips            => $wildcard_fpo_ips,
>          server_aliases => [ "ask.stg.fedoraproject.org" ],
> @@ -357,13 +356,6 @@ class proxy {
>          cert_name      => "wildcard.fedoraproject.org",
>          sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert",
>      }
> -    } else {
> -    httpd::website { "ask.fedoraproject.org":
> -        ips            => $wildcard_fpo_ips,
> -        server_aliases => [ "ask.stg.fedoraproject.org" ],
> -        ssl            => false,
> -    }
> -    }
>  
>      httpd::website { "darkserver.fedoraproject.org":
>          ips            => $wildcard_fpo_ips,



> _______________________________________________
> infrastructure mailing list
> infrastructure at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20121029/f19ccce7/attachment-0001.sig>


More information about the infrastructure mailing list