= Liste des sites et services utilisant le certificat Gandi =

||Serveur||VirtualHost Apache||Observations||Heartbleed <<FootNote(Clé changée en avril 2014 ? <<BR>> Voir [[https://www.gandi.net/news/en/2014-04-08/1398-openssl_heartbleed_issue/?lang=fr|l'annonce Gandi]], [[http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160|le CVE]] et le site de test http://heartbleed.com/)>> ||
||<|7>new-diogene.auf.org|| /etc/apache2/sites-enabled/000-default|| || (./) ||
||/etc/apache2/sites-enabled/21-informatique.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/24-ifgu.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/25-sigma2.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/26-cartographie.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/27-csf-francophonie.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/28-psp.auf.org|| || (./) ||
||<|2>www.auf.org|| /etc/apache2/sites-enabled/000-default|| || (./) ||
||/etc/apache2/sites-enabled/02-projets-p4.auf.org|| || (./) ||


= Liste des sites et services migrés vers Let's Encrypt (certbot) =

||Serveur||VirtualHost Apache||Observations||Heartbleed||
||annuaire.auf.org|| etc/apache2/sites-available/00-annuaire.auf.org|| || (./) ||
||redmine.auf.org|| /etc/apache2/sites-enabled/redmine.auf.org|| || (./) ||
||wiki.auf.org|| /etc/apache2/sites-enabled/00-wiki|| || (./) ||
||<|5>wcs.auf.org|| /etc/apache2/sites-enabled/001-default-ssl|| || (./) ||
||/etc/apache2/sites-enabled/01-formulaires.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/02-test-formulaires.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/03-anciens-formulaires.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/04-preprod-formulaires.auf.org|| || (./) ||
||<|2>vmphp.auf.org|| /etc/apache2/sites-enabled/001-default-ssl|| || (./) ||
||/etc/apache2/sites-enabled/sondages.auf.org-ssl|| || (./) ||
||<|2>pypi.auf.org|| /etc/apache2/sites-enabled/01-pypi.auf.org|| || (./) ||
||/etc/apache2/sites-enabled/03-references.auf.org|| || (./) ||
||<|5>coda.auf.org|| /etc/apache2/sites-enabled/coda.auf.org-ssl|| || (./) ||
||/etc/apache2/sites-enabled/coda2.auf.org-ssl|| || (./) ||
||/etc/apache2/sites-enabled/coda3.auf.org-ssl|| || (./) ||
||/etc/apache2/sites-enabled/form-coda.auf.org-ssl|| || (./) ||
||/etc/apache2/sites-enabled/test-coda.auf.org-ssl|| || (./) ||
||assistance-informatique.auf.org|| /etc/apache2/sites-enabled/00-jutda.auf.org.conf|| || (./) ||
||listes.auf.org|| /etc/apache2/sites-enabled/mailman|| || (./) ||
||id.auf.org|| /etc/apache2/sites-enabled/authentic2-ssl|| || (./) ||
||intranet.auf.org|| /etc/apache2/sites-enabled/default-ssl|| || (./) ||
||dev.sirh.auf.org|| /etc/apache2/sites-enabled/dev.sirh.auf.org-ssl|| || (./) ||
||test.sirh.auf.org|| /etc/apache2/sites-enabled/test.sirh.auf.org-ssl|| || (./) ||
||form-sirh.auf.org|| /etc/apache2/sites-enabled/form-sirh.auf.org-ssl|| || (./) ||
||sirh.auf.org|| /etc/apache2/sites-enabled/sirh.auf.org-ssl|| || (./) ||
||git.auf.org|| /etc/apache2/sites-enabled/01-git.auf.org|| || (./) ||
||<|2>frontal.auf.org|| /etc/apache2/sites-enabled/000-default-ssl|| || (./) ||
||/etc/apache2/sites-enabled/prima.auf.org|| || (./) ||
||conventions.auf.org|| /etc/apache2/sites-enabled/aufged.conf|| || (./) ||


= Liste des sites et services décomissionnés =

||Serveur||VirtualHost Apache||Observations||Heartbleed||
||webmail.ca.auf.org|| /etc/apache2/sites-enabled/default-ssl|| || (./) ||
||redminebeta.auf.org|| /etc/apache2/sites-enabled/redminebeta.auf.org|| || (./) ||
||igc.auf.org|| /etc/apache2/sites-enabled/frontal-ejbca|| || (./) ||
||glpi.auf.org|| /etc/apache2/conf.d/glpi|| || (./) ||
||nuage.auf.org|| /etc/apache2/sites-enabled/nuage.auf.org || || (./) ||
||test-nuage.auf.org||
||test-www.auf.org||
||<|2>preprod-web.ca.auf.org|| /etc/apache2/sites-enabled/000-default-ssl|| || (./) ||
||/etc/apache2/sites-enabled/17-clavardage.auf.org-ssl|| || (./) ||


= Ansible : playbook pour la copie des certificats Gandi =

{{{
mnombre@u-nm:~/mes-outils/ansible$ cat playbook-certs-ssl.yml
---
- name: Déploiement certificat SSL *.auf.org
  hosts: certs-gandi-auforg
  become: True

  vars:
    ssl_cert_file: files/_.auf.org-cert.pem
    ssl_key_file: files/_.auf.org-key.pem
    ssl_ca_file: files/GandiStandardSSLCA.pem

  tasks:
  - name: Copie du fichier cert
    copy: src={{ ssl_cert_file }}/ dest=/etc/ssl/certs owner=root group=root mode=0444

  - name: Copie du fichier key
    copy: src={{ ssl_key_file }}/ dest=/etc/ssl/private owner=root group=root mode=0400

  - name: Copie du fichier CA
    copy: src={{ ssl_ca_file }}/ dest=/etc/ssl/certs owner=root group=root mode=0444

  - name: redémarrage du service Apache2
    service: name=apache2 state=restarted
}}} `mnombre@u-nm:~/mes-outils/ansible$ ansible-playbook -K  playbook-certs-ssl.yml`

----