We have a request at: https://fedorahosted.org/fedora-infrastructure/ticket/3535 to allow https for ask.fedoraproject.org. This is a pretty simple change: diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index df0a733..af80b44 100644 --- a/manifests/services/proxy.pp +++ b/manifests/services/proxy.pp @@ -351,7 +351,9 @@ class proxy { httpd::website { "ask.fedoraproject.org": ips => $wildcard_fpo_ips, server_aliases => [ "ask.stg.fedoraproject.org" ], - ssl => false, + ssl => true, + cert_name => "wildcard.fedoraproject.org", + sSLCertificateChainFile => "wildcard.fedoraproject.org.intermediate.cert", } httpd::website { "darkserver.fedoraproject.org": Any +1's? Or should we just wait until after freeze? kevin
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/infrastructure