summaryrefslogtreecommitdiffstats
path: root/roles/releng/files/fedmsg/ssl.py
blob: 721fb2504e53dbe21e097f23ea83d3adb43c8f56 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

suffix = "phx2.fedoraproject.org"
app_hosts = [
    "app01.phx2.fedoraproject.org",
    "app02.phx2.fedoraproject.org",
    "app03.phx2.fedoraproject.org",
    "app04.phx2.fedoraproject.org",
    "app05.fedoraproject.org",
    "app07.phx2.fedoraproject.org",
    "app08.fedoraproject.org",
]

config = dict(
    sign_messages=True,
    validate_signatures=False,
    ssldir="/etc/pki/fedmsg",

    crl_location="https://fedoraproject.org/fedmsg/crl.pem",
    crl_cache="/var/run/fedmsg/crl.pem",
    crl_cache_expiry=86400,  # Daily

    certnames=dict(
    [
        ("shell.app0%i" % i, "shell-%s" % app_hosts[i-1])
        for i in range(1, len(app_hosts) + 1)
    ] + [
        ("bodhi.app0%i" % i, "bodhi-%s" % app_hosts[i-1])
        for i in range(1, len(app_hosts) + 1)
    ] + [
        ("mediawiki.app0%i" % i, "mediawiki-%s" % app_hosts[i-1])
        for i in range(1, len(app_hosts) + 1)
    ] + [
        ("shell.fas0%i" % i, "shell-fas0%i.%s" % (i, suffix))
        for i in range(1, 4)
    ] + [
        ("fas.fas0%i" % i, "fas-fas0%i.%s" % (i, suffix))
        for i in range(1, 4)
    ] + [
        ("shell.packages0%i" % i, "shell-packages0%i.%s" % (i, suffix))
        for i in range(1, 3)
    ] + [
        ("fedoratagger.packages0%i" % i, "fedoratagger-packages0%i.%s" % (i, suffix))
        for i in range(1, 3)
    ] + [
        ("shell.pkgs0%i" % i, "shell-pkgs0%i.%s" % (i, suffix))
        for i in range(1, 2)
    ] + [
        ("scm.pkgs0%i" % i, "scm-pkgs0%i.%s" % (i, suffix))
        for i in range(1, 2)
    ] + [
        ("shell.relepel01", "shell-relepel01.%s" % suffix),
        ("shell.releng04", "shell-releng04.%s" % suffix),
        ("shell.branched-composer", "shell-releng01.%s" % suffix),
        ("shell.rawhide-composer", "shell-releng02.%s" % suffix),
        ("bodhi.relepel01", "bodhi-relepel01.%s" % suffix),
        ("bodhi.releng04", "bodhi-releng04.%s" % suffix),
        ("bodhi.branched-composer", "bodhi-releng01.%s" % suffix),
        ("bodhi.rawhide-composer", "bodhi-releng02.%s" % suffix),
    ] + [
        ("shell.value01", "shell-value01.%s" % suffix),
        ("shell.value03", "shell-value03.%s" % suffix),
        ("supybot.value03", "supybot-value03.%s" % suffix),
    ])
)