projects / mirror / dsa-puppet.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 232d0de)
LE cert for vote
authorPeter Palfrader <peter@palfrader.org>
Wed, 12 Oct 2016 12:23:35 +0000 (14:23 +0200)
committerPeter Palfrader <peter@palfrader.org>
Wed, 12 Oct 2016 12:23:35 +0000 (14:23 +0200)
modules/roles/manifests/vote.pp patch | blob | history
modules/ssl/files/chains/vote.debian.org.crt [deleted symlink] patch | blob | history
modules/ssl/files/servicecerts/vote.debian.org.crt [deleted file] patch | blob | history

diff --git a/modules/roles/manifests/vote.pp b/modules/roles/manifests/vote.pp
index eedb470..dacb24f 100644 (file)
--- a/modules/roles/manifests/vote.pp
+++ b/modules/roles/manifests/vote.pp
@@ -1,6 +1,6 @@
 class roles::vote {
        ssl::service { 'vote.debian.org':
                notify  => Exec['service apache2 reload'],
-               tlsaport => 0,
+               key => true,
        }
 }
diff --git a/modules/ssl/files/chains/vote.debian.org.crt b/modules/ssl/files/chains/vote.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/vote.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file
diff --git a/modules/ssl/files/servicecerts/vote.debian.org.crt b/modules/ssl/files/servicecerts/vote.debian.org.crt
deleted file mode 100644 (file)
index e1d3809..0000000
--- a/modules/ssl/files/servicecerts/vote.debian.org.crt
+++ /dev/null
@@ -1,118 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            ef:ee:24:44:2d:b9:57:41:6e:b4:36:6d:86:6b:f7:cc
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Dec 11 00:00:00 2015 GMT
-            Not After : Jan 22 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=vote.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:c4:13:2e:18:48:aa:5b:3a:25:20:a4:12:9f:bc:
-                    3b:0b:08:c5:5d:8e:df:c5:b4:f5:b9:9e:a2:48:5a:
-                    7b:47:18:26:d9:1a:47:6c:17:ff:9a:63:f8:1c:2b:
-                    95:a7:5a:cf:e2:d7:e3:8a:a0:d8:b0:ab:d1:96:4d:
-                    d6:2c:90:fa:85:04:0f:a5:a4:39:39:12:22:a0:10:
-                    0f:bf:c0:75:5f:36:70:89:e3:c3:02:09:e8:31:3e:
-                    61:e4:08:98:61:18:d2:82:ef:10:1f:27:7d:ae:c8:
-                    77:12:fb:b3:cd:70:7d:66:d7:a6:28:4c:c6:52:a4:
-                    92:b1:de:91:5b:b0:f1:28:33:7a:6a:29:8a:02:ff:
-                    d7:01:5d:a8:e8:60:de:72:bd:51:af:03:e8:39:ae:
-                    a7:dc:17:e3:c8:a5:a4:aa:2a:6e:54:19:aa:1a:14:
-                    b6:cd:28:9d:3e:0a:a9:46:76:0e:32:ee:d7:6a:2d:
-                    31:75:33:bc:b7:c0:67:b9:83:e0:f1:d6:de:34:51:
-                    14:ba:56:6e:b9:b9:fc:ee:a7:7b:a6:cf:a9:52:0a:
-                    3f:63:96:b1:6e:42:55:56:7d:c9:7c:49:fc:09:af:
-                    84:62:0d:22:b7:e9:b4:38:a4:7e:5b:81:63:36:e2:
-                    b5:bb:86:7a:97:62:2c:fc:1c:64:9c:3e:4c:b9:9f:
-                    84:ea:99:db:ee:ed:ef:38:ef:29:1f:1c:54:c1:a1:
-                    49:90:ba:64:2a:b6:ad:aa:05:ea:fe:f6:ff:60:b4:
-                    66:fa:8a:27:4d:ba:9b:57:25:0d:a3:38:08:90:08:
-                    a4:a7:0a:87:2c:f4:6e:66:9b:ff:20:40:f9:c1:55:
-                    0d:8a:dc:69:35:d0:39:7b:14:21:dd:a8:00:6f:02:
-                    14:91:d4:36:61:d9:5b:b1:6f:8c:1e:ef:c4:bc:2b:
-                    e0:1c:d7:a7:6d:d0:2b:43:5f:d0:65:78:76:30:4a:
-                    22:f5:0d:41:fd:19:61:2f:c3:36:b3:0a:06:98:f7:
-                    89:5e:b7:c7:2f:bc:65:03:5a:c9
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                E4:58:4E:FF:D0:C7:CF:B7:09:40:B0:0E:5C:AF:E4:28:6D:EB:1D:95
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:vote.debian.org, DNS:www.vote.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         1c:8b:d8:db:71:28:2d:ed:24:b0:19:ec:35:3e:27:76:3d:74:
-         f6:8a:96:12:c5:d0:13:fe:ea:84:0a:fc:d0:72:f7:dc:8e:5f:
-         84:79:c8:1c:30:ad:e8:06:5e:7c:8a:cf:a2:69:cb:e5:f5:4b:
-         d1:c1:78:f6:e3:bb:4d:2e:4a:30:0e:05:2a:82:bb:47:8c:46:
-         59:95:18:f3:3f:37:4c:51:a5:f8:3c:c5:a9:c4:40:3f:9d:70:
-         56:66:64:8e:a9:dc:31:4c:10:05:e0:48:d7:ea:ea:2d:8c:12:
-         42:d4:83:32:57:ad:1a:0a:4d:da:d9:6c:aa:06:79:f6:78:0b:
-         c0:3f:06:eb:69:c7:79:c9:fc:e4:2b:1f:44:4a:7f:aa:92:15:
-         b4:e8:8e:58:c7:1d:73:a0:af:78:3a:dc:ba:6a:49:2d:5e:28:
-         7e:0a:d7:c2:a9:1b:21:cb:9a:b1:4b:cd:50:74:55:ec:0e:7d:
-         d8:05:e5:aa:d7:8c:8a:c6:07:e3:97:0e:e2:51:2e:15:bd:fd:
-         e0:ca:1a:22:24:54:ef:51:42:a1:8d:c4:21:42:77:49:a2:7b:
-         ef:cb:91:5e:e8:32:4f:40:ba:2d:ca:a3:86:f1:2b:be:a0:4f:
-         b2:1b:68:7f:c5:fd:cd:2f:53:82:1a:21:ad:8f:19:6a:0e:d9:
-         25:3c:a3:00
------BEGIN CERTIFICATE-----
-MIIFfTCCBGWgAwIBAgIRAO/uJEQtuVdBbrQ2bYZr98wwDQYJKoZIhvcNAQELBQAw
-XzELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMQ4wDAYDVQQHEwVQYXJpczEO
-MAwGA1UEChMFR2FuZGkxIDAeBgNVBAMTF0dhbmRpIFN0YW5kYXJkIFNTTCBDQSAy
-MB4XDTE1MTIxMTAwMDAwMFoXDTE3MDEyMjIzNTk1OVowWjEhMB8GA1UECxMYRG9t
-YWluIENvbnRyb2wgVmFsaWRhdGVkMRswGQYDVQQLExJHYW5kaSBTdGFuZGFyZCBT
-U0wxGDAWBgNVBAMTD3ZvdGUuZGViaWFuLm9yZzCCAaIwDQYJKoZIhvcNAQEBBQAD
-ggGPADCCAYoCggGBAMQTLhhIqls6JSCkEp+8OwsIxV2O38W09bmeokhae0cYJtka
-R2wX/5pj+Bwrladaz+LX44qg2LCr0ZZN1iyQ+oUED6WkOTkSIqAQD7/AdV82cInj
-wwIJ6DE+YeQImGEY0oLvEB8nfa7IdxL7s81wfWbXpihMxlKkkrHekVuw8Sgzemop
-igL/1wFdqOhg3nK9Ua8D6Dmup9wX48ilpKoqblQZqhoUts0onT4KqUZ2DjLu12ot
-MXUzvLfAZ7mD4PHW3jRRFLpWbrm5/O6ne6bPqVIKP2OWsW5CVVZ9yXxJ/AmvhGIN
-IrfptDikfluBYzbitbuGepdiLPwcZJw+TLmfhOqZ2+7t7zjvKR8cVMGhSZC6ZCq2
-raoF6v72/2C0ZvqKJ026m1clDaM4CJAIpKcKhyz0bmab/yBA+cFVDYrcaTXQOXsU
-Id2oAG8CFJHUNmHZW7FvjB7vxLwr4BzXp23QK0Nf0GV4djBKIvUNQf0ZYS/DNrMK
-Bpj3iV63xy+8ZQNayQIDAQABo4IBtzCCAbMwHwYDVR0jBBgwFoAUs5Cn2MmvTs1h
-PJ98rV1/Qf1pMOowHQYDVR0OBBYEFORYTv/Qx8+3CUCwDlyv5Cht6x2VMA4GA1Ud
-DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
-BgEFBQcDAjBLBgNVHSAERDBCMDYGCysGAQQBsjEBAgIaMCcwJQYIKwYBBQUHAgEW
-GWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMEEGA1UdHwQ6MDgw
-NqA0oDKGMGh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9HYW5kaVN0YW5kYXJkU1NM
-Q0EyLmNybDBzBggrBgEFBQcBAQRnMGUwPAYIKwYBBQUHMAKGMGh0dHA6Ly9jcnQu
-dXNlcnRydXN0LmNvbS9HYW5kaVN0YW5kYXJkU1NMQ0EyLmNydDAlBggrBgEFBQcw
-AYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAvBgNVHREEKDAmgg92b3RlLmRl
-Ymlhbi5vcmeCE3d3dy52b3RlLmRlYmlhbi5vcmcwDQYJKoZIhvcNAQELBQADggEB
-AByL2NtxKC3tJLAZ7DU+J3Y9dPaKlhLF0BP+6oQK/NBy99yOX4R5yBwwregGXnyK
-z6Jpy+X1S9HBePbju00uSjAOBSqCu0eMRlmVGPM/N0xRpfg8xanEQD+dcFZmZI6p
-3DFMEAXgSNfq6i2MEkLUgzJXrRoKTdrZbKoGefZ4C8A/Butpx3nJ/OQrH0RKf6qS
-FbTojljHHXOgr3g63LpqSS1eKH4K18KpGyHLmrFLzVB0VewOfdgF5arXjIrGB+OX
-DuJRLhW9/eDKGiIkVO9RQqGNxCFCd0mie+/LkV7oMk9Aui3Ko4bxK76gT7IbaH/F
-/c0vU4IaIa2PGWoO2SU8owA=
------END CERTIFICATE-----
Unnamed repository; edit this file 'description' to name the repository.