HomePhabricator

beta: Use Let's Encrypt for upload, and new self-signed SSL certificate for…
1b4bde6062d9Unpublished

Authored by Krenair on Oct 20 2015, 3:33 PM.

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.
This commit no longer exists in the repository. It may have been part of a branch which was deleted.This commit has been deleted in the repository: it is no longer reachable from any branch, tag, or ref.

Description

beta: Use Let's Encrypt for upload, and new self-signed SSL certificate for most of text

We could make this self-signed cert use SAN, so it actually matches the domains,
but browsers still wouldn't trust it.

There is an extremely nasty dependency bug hidden here - to get this working, you have to:

  • Enable acme_challenge in nginx config, restart nginx
  • Ensure it starts - e.g. you already have a valid cert
  • Apply the puppet patch
  • Run puppet
  • Run puppet again

TODO: Find some way to template this mess of a subjects list.

Bug: T50501
Change-Id: I450316d795046ed49d057b221433ce9b172b9d6b

Details

Committed
KrenairAug 2 2016, 7:45 AM
ChangeId
I450316d795046ed49d057b221433ce9b172b9d6b

Commit No Longer Exists

This commit no longer exists in the repository.