Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 91DDE2009DC for ; Tue, 2 May 2017 15:26:12 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 90893160BAC; Tue, 2 May 2017 13:26:12 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id D6D44160BA1 for ; Tue, 2 May 2017 15:26:11 +0200 (CEST) Received: (qmail 34748 invoked by uid 500); 2 May 2017 13:26:11 -0000 Mailing-List: contact commits-help@airavata.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@airavata.apache.org Delivered-To: mailing list commits@airavata.apache.org Received: (qmail 34738 invoked by uid 99); 2 May 2017 13:26:10 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 May 2017 13:26:10 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id B7197DFBC8; Tue, 2 May 2017 13:26:10 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: machristie@apache.org To: commits@airavata.apache.org Message-Id: X-Mailer: ASF-Git Admin Mailer Subject: airavata git commit: Temporarily disable WSO2 IS SSL verification and API security Date: Tue, 2 May 2017 13:26:10 +0000 (UTC) archived-at: Tue, 02 May 2017 13:26:12 -0000 Repository: airavata Updated Branches: refs/heads/master a97bb13b5 -> 24f8b7f0f Temporarily disable WSO2 IS SSL verification and API security Project: http://git-wip-us.apache.org/repos/asf/airavata/repo Commit: http://git-wip-us.apache.org/repos/asf/airavata/commit/24f8b7f0 Tree: http://git-wip-us.apache.org/repos/asf/airavata/tree/24f8b7f0 Diff: http://git-wip-us.apache.org/repos/asf/airavata/diff/24f8b7f0 Branch: refs/heads/master Commit: 24f8b7f0f23a098babac6b1017c8b9bce67f71f2 Parents: a97bb13 Author: Marcus Christie Authored: Mon May 1 14:08:55 2017 -0400 Committer: Marcus Christie Committed: Tue May 2 09:24:26 2017 -0400 ---------------------------------------------------------------------- .../inventories/scigap/production/group_vars/all/vars.yml | 4 +++- dev-tools/ansible/roles/pga/defaults/main.yml | 1 + dev-tools/ansible/roles/pga/templates/pga_config.php.j2 | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/airavata/blob/24f8b7f0/dev-tools/ansible/inventories/scigap/production/group_vars/all/vars.yml ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/inventories/scigap/production/group_vars/all/vars.yml b/dev-tools/ansible/inventories/scigap/production/group_vars/all/vars.yml index 33950d6..756edea 100644 --- a/dev-tools/ansible/inventories/scigap/production/group_vars/all/vars.yml +++ b/dev-tools/ansible/inventories/scigap/production/group_vars/all/vars.yml @@ -66,7 +66,7 @@ zookeeper_url: "{{ groups['zookeeper'][0] }}:{{ zookeeper_client_port }}" api_server_name: "apiserver-node0" api_server_host: "{{ groups['api-orch'][0] }}" api_server_port: "8930" -api_secured: "true" +api_secured: "false" tls_enable: "true" api_server_tls_port: "9930" enable_sharing: "true" @@ -117,6 +117,8 @@ user_data_dir: "/var/www/portals/gateway-user-data" #airavata_server: "tls://gw77.iu.xsede.org" airavata_server: "tls://{{ groups['api-orch'][0] }}" airavata_port: "9930" +# FIXME: temporarily turn off SSL verification for WSO2 IS +auth_verify_peer: "false" # Sharing Registry related variables sharing_registry_host: "{{ groups['api-orch'][0] }}" http://git-wip-us.apache.org/repos/asf/airavata/blob/24f8b7f0/dev-tools/ansible/roles/pga/defaults/main.yml ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/roles/pga/defaults/main.yml b/dev-tools/ansible/roles/pga/defaults/main.yml index a7e7934..e8f869b 100644 --- a/dev-tools/ansible/roles/pga/defaults/main.yml +++ b/dev-tools/ansible/roles/pga/defaults/main.yml @@ -49,6 +49,7 @@ admin_role_name: "admin" admin_readonly_role_name: "admin-read-only" user_role_name: "gateway-user" initial_role_name: "user-pending" +auth_verify_peer: "true" ## Airavata Client related variables #airavata_server: "tls://gw77.iu.xsede.org" http://git-wip-us.apache.org/repos/asf/airavata/blob/24f8b7f0/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 ---------------------------------------------------------------------- diff --git a/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 b/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 index a8b34da..af887be 100644 --- a/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 +++ b/dev-tools/ansible/roles/pga/templates/pga_config.php.j2 @@ -74,7 +74,7 @@ return array( /** * Enable HTTPS server verification */ - 'verify-peer' => true, + 'verify-peer' => {{ auth_verify_peer }}, /** * Path to the server certificate file