LE cert for security-tracker

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index d074110..4c7ee44 100644 (file)
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -1,6 +1,6 @@
 class roles::security_tracker {
        ssl::service { 'security-tracker.debian.org':
                notify  => Exec['service apache2 reload'],
-               tlsaport => 0,
+               key => true,
        }
 }

diff --git a/modules/ssl/files/chains/security-tracker.debian.org.crt b/modules/ssl/files/chains/security-tracker.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/security-tracker.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt b/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
deleted file mode 100644 (file)
index f2a9814..0000000
--- a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
+++ /dev/null
@@ -1,119 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            15:7e:17:02:3c:7f:e0:48:09:cb:d7:96:ec:08:96:b5
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Dec 11 00:00:00 2015 GMT
-            Not After : Jan 20 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=security-tracker.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:cf:fd:ef:f2:c5:2a:7a:da:d2:07:2c:21:c9:89:
-                    e4:21:0e:f6:c8:72:b2:15:90:fe:5c:d9:b7:1a:5b:
-                    83:f4:84:e7:a3:d6:95:cf:c5:d1:57:dd:a9:ac:67:
-                    23:27:c8:a6:1a:73:20:f4:c9:a2:23:67:50:e7:df:
-                    49:20:3f:01:3d:2c:3a:95:50:a3:98:80:e8:c5:81:
-                    54:de:74:e9:99:24:0a:33:63:e2:5f:13:16:63:27:
-                    45:bc:e8:2a:5a:2e:40:d2:85:99:dd:54:ff:07:53:
-                    90:f6:02:83:e1:5d:23:79:14:1c:14:7f:64:09:be:
-                    92:66:8c:7f:4c:3d:a9:c6:57:b9:70:a0:83:b3:e8:
-                    f3:ec:cc:2a:e3:7b:4d:7c:fd:c5:c5:ca:7b:c5:99:
-                    0d:39:b2:a1:05:49:6e:38:57:4c:4b:9b:e0:36:a4:
-                    bf:cb:2e:b5:76:bd:c5:c3:11:48:a0:06:38:e2:a4:
-                    ed:47:92:2c:72:4c:ce:c9:12:39:94:c7:bc:7e:7f:
-                    82:bb:72:e8:f4:50:57:8f:a7:5a:ab:40:b0:7b:79:
-                    b9:50:28:7a:ce:be:96:38:79:e3:ce:25:6e:c9:dd:
-                    c4:15:22:cd:9b:77:97:cb:54:9d:46:9c:50:a8:c2:
-                    4b:c9:62:c1:42:d4:b2:7f:0d:54:31:85:51:e3:ca:
-                    5d:f1:9a:1f:68:ef:12:08:94:40:40:b0:1b:05:35:
-                    75:f3:e2:d5:ff:c3:46:3c:54:4e:2b:c3:2c:8e:e6:
-                    5b:78:de:36:ee:4c:83:c1:75:5d:06:0b:ff:8c:80:
-                    ac:a7:fe:f6:21:9c:94:ca:f9:13:02:cb:31:4a:2b:
-                    49:26:fd:f1:3c:ad:bd:c6:b6:93:c5:6a:e6:6f:bb:
-                    e4:88:5e:8c:0d:bf:4f:2a:12:59:9b:ae:2d:36:f1:
-                    31:db:e5:0f:25:05:99:2e:ad:ba:76:19:2b:49:e3:
-                    76:81:b8:91:f8:89:b8:92:db:7c:8f:3f:15:d3:eb:
-                    b8:e3:19:58:6b:c5:8f:a8:51:d1
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                EE:8D:2D:52:28:5E:D4:85:53:F2:6C:13:2A:72:6D:21:07:4D:B7:F5
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:security-tracker.debian.org, DNS:www.security-tracker.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         58:63:6e:65:2e:4a:81:f4:43:1f:5b:a2:69:6a:cb:25:e5:00:
-         6d:82:e8:08:0d:bc:a6:eb:46:a9:26:f3:b5:6f:d2:e3:29:0d:
-         68:1b:07:80:8e:56:d3:fb:1d:16:68:4e:a8:4e:a5:ba:7f:6a:
-         6b:1f:b7:de:25:5d:1d:6d:5d:6f:81:0d:ce:24:35:1e:17:90:
-         bb:28:40:5c:f7:21:07:5a:77:07:07:cb:7e:bf:6f:05:f5:0d:
-         11:b7:02:79:1f:ed:d4:40:f1:1b:c5:4c:ef:fc:4e:d9:be:31:
-         f1:bc:ce:7c:07:38:d6:83:6d:1d:2b:43:a7:ce:a5:4b:3a:ba:
-         35:84:af:62:7a:90:fa:e7:ec:1c:92:ba:38:b1:f4:ec:75:26:
-         a4:39:9d:bd:c6:36:ce:62:e3:47:49:de:b5:60:79:2e:f4:bb:
-         b7:ff:19:98:e4:14:4b:cd:8c:73:40:67:b0:3b:b6:7f:37:ec:
-         bb:10:cb:20:b1:49:65:f5:db:74:c8:c6:19:d0:88:07:75:05:
-         75:d9:1d:23:7e:e1:9d:b1:ea:7c:47:b4:0d:f2:03:66:45:85:
-         11:b4:19:c6:96:e2:72:dc:59:17:67:98:d1:35:5a:41:78:cf:
-         6d:c1:db:68:b0:0a:f6:56:b3:88:74:dd:1b:2b:a0:de:c6:0b:
-         3e:7d:58:c5
------BEGIN CERTIFICATE-----
-MIIFoDCCBIigAwIBAgIQFX4XAjx/4EgJy9eW7AiWtTANBgkqhkiG9w0BAQsFADBf
-MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
-DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
-HhcNMTUxMjExMDAwMDAwWhcNMTcwMTIwMjM1OTU5WjBmMSEwHwYDVQQLExhEb21h
-aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
-TDEkMCIGA1UEAxMbc2VjdXJpdHktdHJhY2tlci5kZWJpYW4ub3JnMIIBojANBgkq
-hkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAz/3v8sUqetrSBywhyYnkIQ72yHKyFZD+
-XNm3GluD9ITno9aVz8XRV92prGcjJ8imGnMg9MmiI2dQ599JID8BPSw6lVCjmIDo
-xYFU3nTpmSQKM2PiXxMWYydFvOgqWi5A0oWZ3VT/B1OQ9gKD4V0jeRQcFH9kCb6S
-Zox/TD2pxle5cKCDs+jz7Mwq43tNfP3Fxcp7xZkNObKhBUluOFdMS5vgNqS/yy61
-dr3FwxFIoAY44qTtR5IsckzOyRI5lMe8fn+Cu3Lo9FBXj6daq0Cwe3m5UCh6zr6W
-OHnjziVuyd3EFSLNm3eXy1SdRpxQqMJLyWLBQtSyfw1UMYVR48pd8ZofaO8SCJRA
-QLAbBTV18+LV/8NGPFROK8MsjuZbeN427kyDwXVdBgv/jICsp/72IZyUyvkTAssx
-SitJJv3xPK29xraTxWrmb7vkiF6MDb9PKhJZm64tNvEx2+UPJQWZLq26dhkrSeN2
-gbiR+Im4ktt8jz8V0+u44xlYa8WPqFHRAgMBAAGjggHPMIIByzAfBgNVHSMEGDAW
-gBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQU7o0tUihe1IVT8mwTKnJt
-IQdNt/UwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI
-KwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAhowJzAl
-BggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEw
-QQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0dhbmRp
-U3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8BggrBgEFBQcwAoYw
-aHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3J0
-MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMEcGA1UdEQRA
-MD6CG3NlY3VyaXR5LXRyYWNrZXIuZGViaWFuLm9yZ4Ifd3d3LnNlY3VyaXR5LXRy
-YWNrZXIuZGViaWFuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAWGNuZS5KgfRDH1ui
-aWrLJeUAbYLoCA28putGqSbztW/S4ykNaBsHgI5W0/sdFmhOqE6lun9qax+33iVd
-HW1db4ENziQ1HheQuyhAXPchB1p3BwfLfr9vBfUNEbcCeR/t1EDxG8VM7/xO2b4x
-8bzOfAc41oNtHStDp86lSzq6NYSvYnqQ+ufsHJK6OLH07HUmpDmdvcY2zmLjR0ne
-tWB5LvS7t/8ZmOQUS82Mc0BnsDu2fzfsuxDLILFJZfXbdMjGGdCIB3UFddkdI37h
-nbHqfEe0DfIDZkWFEbQZxpbictxZF2eY0TVaQXjPbcHbaLAK9laziHTdGyug3sYL
-Pn1YxQ==
------END CERTIFICATE-----