Closed Bug 1028515 Opened 10 years ago Closed 8 years ago

SSL Certificate for plesk.mozilla-community.org

Categories

(Infrastructure & Operations :: SSL Certificates, task)

Product:
Infrastructure & Operations
Component:
SSL Certificates
Platform:
x86
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: tom, Assigned: gozer)

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/3672]) 

For the last ~year our plesk server has been using a bad certificate. It's not trusted in any browser, and I can't account for where it ever came from.

Since we have a number of people with access to the panel who lack an understanding of SSL, I think we should have a valid certificate. Teaching people to ignore cert warnings isn't really the best thing to do ;)

The hostname is plesk.mozilla-community.org
Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/407]
Assignee: server-ops-webops → gozer
Status: NEW → ASSIGNED
-----BEGIN CERTIFICATE REQUEST-----
MIIDEjCCAfoCAQAwgZoxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh
MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRwwGgYDVQQKExNNb3ppbGxhIENvcnBv
cmF0aW9uMRowGAYDVQQLExFTZWN1cmUgV2ViIFNlcnZlcjEkMCIGA1UEAxMbcGxl
c2subW96aWxsYS1jb21tdW5pdHkub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAltF1n613JaMzUe/pCipeLraGJncKSg2mmKNkKDx7suHDxj6rff5L
O7usenXfumMOwf9+xoQRjlQMaInsR6uI1LLOEqHkb0h2um8dw/0owoMD4rjHZsZi
YNPFW/UFvGvY0+8A25M0s5co+PIB8BX4VeJuZRztwmfBdEHqf44s0fk/qc+L4iey
dNx36RPcc4+lnDsIy4Z7qWRTNUIhFo+PY6mP61vVGczy8Tck2CrU/5LNbF1f2tlk
U+Zk0VsBD76b7yDWDB5/kZS4vopGrdEuH5lyLDmKNK9AjvmF6eMc5lJrF2RBTrH1
r2lTK/PsUSL5cUPlSDKa+v+2xIIWYPzWSQIDAQABoDIwMAYJKoZIhvcNAQkOMSMw
ITARBglghkgBhvhCAQEEBAMCBkAwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUF
AAOCAQEAI/Q+QyOJPymBu/WVFWhG4xOiEYp6UT0S3HGFiCOzXICcCYLVR4Q6fsA6
64n4UXzbS5bkytV7T44xSexVMWcZON7bTWViccOsRhHET/+qPqFcN5U1BzvLfc5g
2K8NnOQOkaptr8sbs77HUbye6GahvDTrEmIbSCTeBaAUhz5WzUfL34v4h0dQQYUe
AmWhaRfg8dw7io5pJXXedf+2xWo73FhNQ9sIW4tr4SqVGKdJPpBrd1cIOuCuhr7x
GMMG3CUeX6PXeb23JdjUCBsSkTc9/HwSzPAGFc+kKvy98qtfQTArEmSGPSHeJizV
Ob7ITEwHtwE4ln6ZK5PdC/6PaJjqKA==
-----END CERTIFICATE REQUEST-----
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIQDbwMi4EHKlzzb4sgRfTBoDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQwNjIzMDAwMDAwWhcN
MTYwNjI3MTIwMDAwWjB2MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNV
BAcTDU1vdW50YWluIFZpZXcxHDAaBgNVBAoTE01vemlsbGEgQ29ycG9yYXRpb24x
JDAiBgNVBAMTG3BsZXNrLm1vemlsbGEtY29tbXVuaXR5Lm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAJbRdZ+tdyWjM1Hv6QoqXi62hiZ3CkoNppij
ZCg8e7Lhw8Y+q33+Szu7rHp137pjDsH/fsaEEY5UDGiJ7EeriNSyzhKh5G9Idrpv
HcP9KMKDA+K4x2bGYmDTxVv1Bbxr2NPvANuTNLOXKPjyAfAV+FXibmUc7cJnwXRB
6n+OLNH5P6nPi+InsnTcd+kT3HOPpZw7CMuGe6lkUzVCIRaPj2Opj+tb1RnM8vE3
JNgq1P+SzWxdX9rZZFPmZNFbAQ++m+8g1gwef5GUuL6KRq3RLh+Zciw5ijSvQI75
henjHOZSaxdkQU6x9a9pUyvz7FEi+XFD5Ugymvr/tsSCFmD81kkCAwEAAaOCAdgw
ggHUMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBRe
7m0vnGGx44Em1dqlU3mCuRL7CDAmBgNVHREEHzAdghtwbGVzay5tb3ppbGxhLWNv
bW11bml0eS5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vc3NjYS1zaGEyLWcyLmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL3NzY2Etc2hhMi1nMi5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1sAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB8Bggr
BgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3
DQEBCwUAA4IBAQAZzT3eZR/FEntXCnI88ckOcc0hUmmzMhXd0132srmCR9UUECBg
n38qTkGT/yjzJH3q5hCUzlbTY9HAPIkupSJAiHLslr5O33PJky504PDTsWKCgwn6
30J3EBkL2yLkTdEL6uvCWf2Ea7UeMrT3yzid0XHjTqrttjSfrXHRlCBqhNyjv/dq
wGG/W/1fcdALINchsPZwuQbYe5Bw5zMPIY2bxmCqZ61BoW1dR1FtKsEyqC7EN6F/
TDDFlko7p1XwHCLMf5Bt6elAHetY0dAnLQv/OHKaPS0zUaCC7b8Hzc8q2kpnP0L6
NGCIGMx4u2D4KbqW83JbRQffHUvQZPzrlaVR
-----END CERTIFICATE-----
For the private key, please send to me via GPG. 

http://gpg.mozilla.org/pks/lookup?op=get&search=0x8C8A75E2582E60F8

Will remain encrypted on my drive, and be uploaded, encrypted to the server.
Sent cerfiticate and key via e-mail:

Message-ID: <53A83E4A.2000406@mozilla.com>
Date: Mon, 23 Jun 2014 10:48:42 -0400
From: "Philippe M. Chiasson" <gozer@mozilla.com>
To: tom@mozilla.org.uk
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
\o/ All is good

gozer++

https://plesk.mozilla-community.org:8443
Status: RESOLVED → VERIFIED
Reopening because the certificate expired few months ago. See bug 1316559 for an automated way of issuing the certificate using letsencrypt.
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/407] → [kanban:https://webops.kanbanize.com/ctrl_board/2/3672]
Please don't re-open old bugs. It's bad for tracking. 

Closing out, please re-file and put in correct place if needed.
Status: REOPENED → RESOLVED
Closed: 10 years ago → 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.