New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FB-9088] Updates certificates and moves it to a better location #473

Merged

dvalfre merged 1 commit into next-release from update_ca_certs

Oct 4, 2021

Contributor

mushyy commented Oct 4, 2021 •

edited

Loading

Description of your patch

Adds ca-certificates package to chef to keep certificates up to date

The is an update to PR #471 due to it not updating on live running instances

Recommended Release Notes

Updated system certificates

Estimated risk

Moderate/High - Is required to avoid errors with external sources using X1 LetsEncrypt

Components involved

security chef recipe
ey-base chef recipe

Dependencies

None

Description of testing done

Created environment
Booted up solo instance
Run eix ca-certificates
curled letsencrypt based website

QA Instructions

Create environment any configuratiin
Boot up instances either solo or multi-instances
Ensure chef runs correctly and entirely
SSH into instance
run eix ca-certificates
curl / openssl connect to any website that runs a letsencrypt certificate


          Fails to upgrade on already running instance

dabd1a6

dvalfre approved these changes

View reviewed changes

Contributor

dvalfre left a comment

This LGTM

dvalfre merged commit 47cb2ca into next-release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet