[ansible] Disable yubikey and update cert template

commit 371e7558e324791ce087932b59ea6113df0d0541 Author: Nicolas Chauvet <kwizart(a)gmail.com&gt; Date: Thu Oct 27 12:03:27 2016 +0200 Disable yubikey and update cert template roles/fas_server/templates/fas.cfg.j2 | 11 ++++------- 1 files changed, 4 insertions(+), 7 deletions(-) --- diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2 index 1020a3c..9bf080b 100644 --- a/roles/fas_server/templates/fas.cfg.j2 +++ b/roles/fas_server/templates/fas.cfg.j2 @@ -211,13 +211,10 @@ mail.transport = 'smtp' mail.manager = 'demand' # Enable yubikeys -yubi_server_prefix='http://localhost/yk-val/verify?id=' {% if env == "staging" %} +yubi_server_prefix='http://localhost/yk-val/verify?id=' ykksm_db="postgres://ykksmimporter:{{ ykksmimporterPassword }}(a)db-fas01.stg/ykksm&quot; ykval_db="postgres://ykval_verifier:{{ ykval_verifierPassword }}(a)db-fas01.stg/ykval&quot; -{% else %} -ykksm_db="postgres://ykksmimporter:{{ ykksmimporterPassword }}@db-ykksm/ykksm" -ykval_db="postgres://ykval_verifier:{{ ykval_verifierPassword }}@db-ykval/ykval" {% endif %} # Enable or disable generation of SSL certificates for users @@ -230,9 +227,9 @@ openssl_expire = 15552000 # 60*60*24*180 = 6 months openssl_ca_dir = "/var/lib/rpmfusion-ca" openssl_ca_newcerts = "/var/lib/rpmfusion-ca/newcerts" openssl_ca_index = "/var/lib/rpmfusion-ca/index.txt" -openssl_c = "FR" -openssl_st = "IDF" -openssl_l = "Paris" +openssl_c = "EU" +openssl_st = "None" +openssl_l = "Freeworld" openssl_o = "RPM Fusion Project" openssl_ou = "RPM Fusion User Cert"