fix(web): fix proxy authentication DN format and server CA option in web.conf

- Use loop-specific owner/group variables for copying certificates in roles/koji_hub/tasks/main.yaml so group: apache is actually applied.

- Update roles/koji_hub/templates/hub.conf.j2 to specify both slash-separated and RFC 2253 comma-separated formats in ProxyDNs.

- Update roles/koji_hub/templates/web.conf.j2 to use KojiHubCA instead of serverca for the web config block.

Co-developed-by: Gemini AI <renich+gemini@woralelandia.com>

Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
This commit is contained in:
Rénich Bon Ćirić 2026-06-16 12:22:19 -06:00
commit de7ec8d165
Signed by: renich
GPG key ID: AB2A9F49384FE324
3 changed files with 4 additions and 4 deletions

View file

@ -8,5 +8,5 @@ WebCert = /etc/pki/koji/kojiweb.pem
LoginTimeout = 72
Secret = {{ web_secret }}
LibPath = /usr/share/koji-web/lib
serverca = {{ koji_remote_ca_trust_path }}
KojiHubCA = {{ koji_remote_ca_trust_path }}
LiteralFooter = True