branch master updated: berlin: Remove no longer existing CRL file from config.

[Maxim Cournoyer]

This is an automated email from the git hooks/post-receive script.

apteryx pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new 5a6b8cd  berlin: Remove no longer existing CRL file from config.
5a6b8cd is described below

commit 5a6b8cd7286d1c8906beaa35ebba6eff5bae3a79
Author: Maxim Cournoyer <maxim.cournoyer@gmail.com>
AuthorDate: Thu May 11 00:25:19 2023 -0400

    berlin: Remove no longer existing CRL file from config.
    
    The new ssl-ca certificate authority produced doesn't have a CRL file
    for now.  Remove it from the config to avoid crashing nginx.
    
    * hydra/nginx/berlin.scm (%berlin-servers): Remove ssl_crl directive.
    (%zabbix-nginx-server): Likewise.
---
 hydra/nginx/berlin.scm | 2 --
 1 file changed, 2 deletions(-)

diff --git a/hydra/nginx/berlin.scm b/hydra/nginx/berlin.scm
index a3ff107..d1df1ba 100644
--- a/hydra/nginx/berlin.scm
+++ b/hydra/nginx/berlin.scm
@@ -261,7 +261,6 @@ PUBLISH-URL."
        "proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;"
        ;; For Cuirass admin interface authentication
        "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;"
-       "ssl_crl /etc/ssl-ca/private/ca.crl;"
        "ssl_verify_client optional;"))))
 
    (nginx-server-configuration
@@ -531,7 +530,6 @@ PUBLISH-URL."
       "proxy_set_header X-Forwarded-For  $proxy_add_x_forwarded_for;"
       ;; For client cert authentication
       "ssl_client_certificate /etc/ssl-ca/certs/ca.crt;"
-      "ssl_crl /etc/ssl-ca/private/ca.crl;"
       "ssl_verify_client on;")))
    (locations
     (let ((php-location (nginx-php-location)))