[gnome-build-meta.wiki] Update Deployment - add how to update SSL cert
- From: Sam Thursfield <sthursfield src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gnome-build-meta.wiki] Update Deployment - add how to update SSL cert
- Date: Tue, 26 Oct 2021 09:20:07 +0000 (UTC)
commit 47ab6e21615d0639a76eef3e82c5e81cba88a32d
Author: Sam Thursfield <sam afuera me uk>
Date: Tue Oct 26 09:20:06 2021 +0000
Update Deployment - add how to update SSL cert
openqa/Deployment.md | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
---
diff --git a/openqa/Deployment.md b/openqa/Deployment.md
index e9e5d0b..74f1cee 100644
--- a/openqa/Deployment.md
+++ b/openqa/Deployment.md
@@ -130,3 +130,22 @@ if [ -d backup-latest/images ]; then
docker exec openqa_webui chown -R geekotest /var/lib/openqa/images
fi
```
+
+## How to renew SSL cert
+
+This should be automated as soon as possible, but in the meantime... here's how to get a new SSL cert as
root openqa gnome org:
+
+```
+cd /root/ssl_cert/acme.sh/
+git pull
+cd ..
+docker run -it --rm --privileged -p80:80 -v $PWD:/root debian:bullseye-slim /bin/bash
+apt-get update && apt-get install curl socat
+cd /root/.acme.sh/
+./acme.sh --issue --standalone -d openqa.gnome.org
+exit
+cd /root/openqa
+cp ../ssl_cert/.acme.sh/openqa.gnome.org/ca.cer workdir/data/certs/ssl.crt/ca.crt
+cp ../ssl_cert/.acme.sh/openqa.gnome.org/openqa.gnome.org.key workdir/data/certs/ssl.key/server.key
+cp ../ssl_cert/.acme.sh/openqa.gnome.org/openqa.gnome.org.cer workdir/data/certs/ssl.crt/server.crt
+```
\ No newline at end of file
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]