Log of /trunk/egi-pilot/robotCA/DS
Directory Listing
Revision
2926 -
Directory Listing
Modified
Wed Mar 23 11:33:28 2016 UTC
(6 years, 4 months ago)
by
msalle
Split access task into access and iptables tasks.
Revision
2923 -
Directory Listing
Modified
Wed Mar 23 10:50:38 2016 UTC
(6 years, 4 months ago)
by
msalle
Fix two mistakes in simple CA setup script: extensions where not installed in
same directory as where they were looked for. Robot subjectDN got CA part twice.
Revision
2922 -
Directory Listing
Modified
Tue Mar 22 20:33:07 2016 UTC
(6 years, 4 months ago)
by
msalle
Fix typo and reorder the disabling/enabling of the services.
Revision
2916 -
Directory Listing
Modified
Mon Mar 21 16:25:07 2016 UTC
(6 years, 4 months ago)
by
msalle
Update for robotCA instead of onlineCA, i.e. using robot cert instead of real CA
cert:
- cafrontend_env.yml:
remove unused myproxy_ca_cn and add robot_tarball
- delegserver_env.yml:
update hostname
- update egi: update hostname
- roles/cafrontend/handlers/main.yml: add restart myproxy server handler
- fix some typos
- copy hostcert/key using a new task hostcreds.yml
- adapt myproxy.yml to rerun when the serial does not exist (the cacert is
extracted from the robots tarball)
- add gpg key for shibboleth repo and install using a copy task (see repos.yml)
- don't create repos using 'yumrepo' from ansible extras (very unstable) but use
a simple template: security_shibboleth.repo.j2 and eugridpma.repo.j2
- don't use IGTF repositories (util) and IGTF repositories (lcg)
- replace robot task with extracting the tarball
- update simple_ca_setup.sh.j2 for using robot cert instead of cacert.
- update README for egi instead of Nikhef
- update typo in ansible.cfg
Revision
2915 -
Directory Listing
Modified
Mon Mar 21 08:15:28 2016 UTC
(6 years, 4 months ago)
by
msalle
- Remove unused kickstart file
- Clone OnlineCA for robot CA (will need updating)
