]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
ODT - fix getcrl cron
authorOliver Böttcher <oliver.boettcher@pixelpark.com>
Mon, 9 Jul 2018 09:37:43 +0000 (11:37 +0200)
committerOliver Böttcher <oliver.boettcher@pixelpark.com>
Mon, 9 Jul 2018 09:37:43 +0000 (11:37 +0200)
customer/mbvd-odt/tmp-odt-daimler-com.pixelpark.net.yaml

index c7e002b36a31af315349d82334fe12c72a05f299..fec29d8dc836e4520f3b118de5c5b319d9436a13 100644 (file)
@@ -113,9 +113,15 @@ infra::profile::apache::pp_vhosts:
       #      - ip 37.202.1.232
 
 infra::profile::cron::cronjobs:
+  gencrl:
+    user: nobody
+    command: '/usr/bin/curl -H "Authorization: basic cGtpYWRtaW46cHAjMjAxNCFvZHQtQmVybGlu" "https://odt-tinyca.pixelpark.net/phpki/ca/index.php?stage=gen_crl" > /dev/null 2>&1'
+    minute: 0
+    hour: 4
+    description: generate crl
   fetchcrl:
     user: root
-    command: 'scp httpd@odt-tinyca:/www/htdocs/odt-tinyca.pixelpark.net/data/phpki-store/CA/crl/cacrl.pem /etc/pki/tls/certs/odt-cacrl.pem && systemctl reload httpd'
+    command: 'scp httpd@odt-tinyca:/www/htdocs/odt-tinyca.pixelpark.net/data/phpki-store/CA/crl/cacrl.pem /etc/apache2/ssl.crl/odt-cacrl.pem && systemctl reload apache2'
     minute: 0
     hour: 5
     description: um 05:00 Uhr wird die Revocationlist vom User openemm geholt. somit muss der Webserver restarted werden