canmove, Confirmed users
1,394
edits
ReleaseEngineering/PuppetAgain/Modules/puppetmaster: Difference between revisions
ReleaseEngineering/PuppetAgain/Modules/puppetmaster (view source)
Revision as of 22:00, 3 January 2013
, 3 January 2013no edit summary
No edit summary |
|||
| Line 14: | Line 14: | ||
= Certificate management = | = Certificate management = | ||
See http://hg.mozilla.org/build/puppet/file/tip/setup/ca-scripts/README | |||
= CRL sync = | = CRL sync = | ||
To keep the list of revoced certificates (CRL) up to date, masters fetch the CRL from CA by a [http://hg.mozilla.org/build/puppet/file/tip/modules/puppetmaster/templates/update_crl.sh.erb cron job] and gracefuly restart apache. | To keep the list of revoced certificates (CRL) up to date, masters fetch the CRL from CA by a [http://hg.mozilla.org/build/puppet/file/tip/modules/puppetmaster/templates/update_crl.sh.erb cron job] and gracefuly restart apache. | ||