SLFO-pool/regionServiceClientConfigEC2
SHA256
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync from SUSE:SLFO:Main regionServiceClientConfigEC2 revision ef1f0790ba5ca640f4d01730ed2a6ae2

Browse Source
This commit is contained in:
Adrian Schröter 2024-08-06 14:17:37 +02:00
parent ffcbf583e8
commit 286eedd53e
5 changed files with 70 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
no-ipv6.patch Normal file
View File

@ -0,0 +1,11 @@
--- etc/regionserverclnt.cfg.orig
+++ etc/regionserverclnt.cfg
@@ -1,7 +1,7 @@
[server]
api = regionInfo
certLocation = /usr/lib/regionService/certs
-regionsrv = 54.253.118.149,54.247.166.75,34.197.223.242,54.223.148.145,54.245.101.47,52.79.82.165,2406:da1c:f2a:8400:9982:83c:559d:7f56,2a05:d018:71c:e300:5ec0:8a24:7b5d:86ef,2600:1f18:4665:e200:3aa2:d7c:2176:70c3,2400:7fc0:8ad4:9e00:78bd:8464:c08c:f4f6,2600:1f13:355:4700:ee7a:f5f8:6b38:c9c,2406:da12:878:8b00:9ea4:1263:39d3:bda1
+regionsrv = 54.253.118.149,54.247.166.75,34.197.223.242,54.223.148.145,54.245.101.47,52.79.82.165
[instance]
dataProvider = /usr/bin/ec2metadata --api latest --document --signature --pkcs7 --xml

BIN
regionServiceClientConfigEC2-4.1.0.tar.bz2 (Stored with Git LFS)
View File

Binary file not shown.

BIN
regionServiceClientConfigEC2-4.3.0.tar.bz2 (Stored with Git LFS) Normal file
View File

Binary file not shown.

38
regionServiceClientConfigEC2.changes
View File

@ -1,3 +1,41 @@
-------------------------------------------------------------------
Fri Jul 26 15:48:32 UTC 2024 - Robert Schweikert <rjschwei@suse.com>
- Update to version 4.3.0 (bsc#1228363)
+ The IPv6 cert was switched up for the region server running in us-west-2
and as such the SSL handshake was failing. Drop the incorrect cert
and add the correct cert.
-------------------------------------------------------------------
Fri Jul 26 11:53:56 UTC 2024 - Robert Schweikert <rjschwei@suse.com>
- Switch the patch syntax away form the deprecated shorthand macro
-------------------------------------------------------------------
Thu May 9 15:30:38 UTC 2024 - Jesús Bermúdez Velázquez <jesus.bv@suse.com>
- Version 4.2.0
Replace certs (length 4096):
rgnsrv-ec2-cn-north1 -> 54.223.148.145 expires in 8 years
rgnsrv-ec2-us-west2-2 -> 54.245.101.47 expires in 9 years
Sidenote: We have one server with a short cert (2048) left;
34.197.223.242 expires in 2027
-------------------------------------------------------------------
Thu Jan 11 12:08:27 UTC 2024 - Jesús Bermúdez Velázquez <jesus.bv@suse.com>
- Version 4.1.1
Add patch no-ipv6.patch to not serve IPv6 addresses on SLES12
Related to bsc#1218656
-------------------------------------------------------------------
Tue Nov 28 14:01:25 UTC 2023 - Jesús Bermúdez Velázquez <jesus.bv@suse.com>
- Update to version 4.1.1 (bsc#1217536)
+ Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
with new generated ones that expire in 8 years and have longer length (4096)
-------------------------------------------------------------------
Wed Sep 7 21:04:59 UTC 2022 - Robert Schweikert <rjschwei@suse.com>

22
regionServiceClientConfigEC2.spec
View File

@ -2,7 +2,7 @@
# spec file for package regionServiceClientConfigEC2
# this code base is under development
#
# Copyright (c) 2020 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -18,13 +18,15 @@
Name: regionServiceClientConfigEC2
Version: 4.1.0
Version: 4.3.0
Release: 0
License: Apache-2.0
Summary: Configuration for region service client
URL: https://gitlab.suse.de/public-cloud-team/region-service-client-config-ec2
Group: Productivity/Networking/Web/Servers
Source0: %{name}-%{version}.tar.bz2
# PATCH-FIX-SLES12SP5 no-ipv6.patch
Patch0: no-ipv6.patch
Provides: cloud-regionsrv-client-config
Provides: regionServiceCertsEC2
Provides: regionsrv-certs
@ -45,6 +47,15 @@ region server certificates
%prep
%setup -q
%if 0%{?suse_version} == 1315
%patch -P 0
rm usr/lib/regionService/certs/2406:da1c:f2a:8400:9982:83c:559d:7f56.pem
rm usr/lib/regionService/certs/2a05:d018:71c:e300:4343:658b:5466:d8c6.pem
rm usr/lib/regionService/certs/2600:1f18:4665:e200:3aa2:d7c:2176:70c3.pem
rm usr/lib/regionService/certs/2400:7fc0:8ad4:9e00:78bd:8464:c08c:f4f6.pem
rm usr/lib/regionService/certs/2600:1f13:355:4700:ee7a:f5f8:6b38:c9c.pem
rm usr/lib/regionService/certs/2406:da12:878:8b00:9ea4:1263:39d3:bda1.pem
%endif
%build
@ -57,7 +68,8 @@ rm -rf $RPM_BUILD_ROOT
%files
%defattr(-,root,root,-)
%doc README LICENSE
%doc README
%license LICENSE
%config %{_sysconfdir}/regionserverclnt.cfg
%dir /usr/lib/regionService
%dir /usr/lib/regionService/certs
@ -67,11 +79,13 @@ rm -rf $RPM_BUILD_ROOT
/usr/lib/regionService/certs/54.245.101.47.pem
/usr/lib/regionService/certs/54.247.166.75.pem
/usr/lib/regionService/certs/54.253.118.149.pem
%if 0%{?suse_version} > 1315
/usr/lib/regionService/certs/2406:da1c:f2a:8400:9982:83c:559d:7f56.pem
/usr/lib/regionService/certs/2a05:d018:71c:e300:5ec0:8a24:7b5d:86ef.pem
/usr/lib/regionService/certs/2a05:d018:71c:e300:4343:658b:5466:d8c6.pem
/usr/lib/regionService/certs/2600:1f18:4665:e200:3aa2:d7c:2176:70c3.pem
/usr/lib/regionService/certs/2400:7fc0:8ad4:9e00:78bd:8464:c08c:f4f6.pem
/usr/lib/regionService/certs/2600:1f13:355:4700:ee7a:f5f8:6b38:c9c.pem
/usr/lib/regionService/certs/2406:da12:878:8b00:9ea4:1263:39d3:bda1.pem
%endif
%changelog