move gerrit certificate renewal to HTTP-01

Description

gerrit.ovirt.org uses let's encrypt with the old TLS-SNI-01 challenge that has been deprecated. The deployment also has issues with SELinux (see https://ovirt-jira.atlassian.net/browse/OVIRT-1329#icft=OVIRT-1329 ) and the HTTP-01 challenge should work better as it touches less files.

Activity

Show:

Former user June 7, 2019 at 9:27 AM

Migrated gerrit to el7 and generated new certificates from scratch using HTTP-01

Former user August 15, 2018 at 11:13 AM

The same thing may be relevant for Jenkins - we can test on Staging and then move to Prod

Fixed

Details

Assignee

Reporter

Priority

Created July 19, 2018 at 9:27 AM
Updated August 29, 2019 at 2:12 PM
Resolved June 7, 2019 at 9:27 AM

Flag notifications