1064635 - Renew SSL Certificate for marketplace.firefox.com.cn - Expires Sep 24 16:03:35 2014

Status: RESOLVED FIXED

(Cloud Services :: Operations: Marketplace, task)

Comment 1

[Jason Thomas [:jason]]

Jack,

You are listed as the domain contact for firefox.com.cn domain. Digicert CA needs to validate the domain before issuing a SSL certificate for marketplace.firefox.com.cn. Digicert CA will send you a email with instructions.

Comment 2

[Yousheng Li [:yli]]

Hi Jason,

We were working on the this, I will send you the new SSL certificate when I get it.

Comment 3

[Jack Guo]

Yes, we are following up on this request. Thanks.

Comment 4

[Jack Guo]

Hi Jason and Yousheng, Just to let you guys know that I received that email from Digicert CA, and I have approved the request already. Thanks.

Comment 5

[Yousheng Li [:yli]]

Hi Jason,

I sent the new SSL certificate to your email.

Comment 6

[Jason Thomas [:jason]]

Certificate updated. Thanks all!

curl -v https://marketplace.firefox.com.cn
* Rebuilt URL to: https://marketplace.firefox.com.cn/
* Adding handle: conn: 0x181d8b0
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x181d8b0) send_pipe: 1, recv_pipe: 0
* About to connect() to marketplace.firefox.com.cn port 443 (#0)
*   Trying 223.202.6.16...
* Connected to marketplace.firefox.com.cn (223.202.6.16) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using TLS_RSA_WITH_RC4_128_SHA
* Server certificate:
* 	subject: CN=marketplace.firefox.com.cn,OU=Domain Control Validated - RapidSSL(R),OU=See www.rapidssl.com/resources/cps (c)14,OU=GT75074771,serialNumber=XAGUAq5L5VJkUO1xk-pQSslASK2JWLlL
* 	start date: Sep 14 15:20:28 2014 GMT
* 	expire date: Oct 16 03:18:59 2017 GMT
* 	common name: marketplace.firefox.com.cn
* 	issuer: CN=RapidSSL CA,O="GeoTrust, Inc.",C=US
> GET / HTTP/1.1
> User-Agent: curl/7.32.0
> Host: marketplace.firefox.com.cn
> Accept: */*
>

Comment 7

[Philippe M. Chiasson (:gozer)]

Looks to me like to missed the other similar named cert: marketplace.cdn.firefox.com.cn. It's still being used and is also about to expire.

Or is that in another bug? (couldn't find one)

Comment 8

[Jason Thomas [:jason]]

marketplace.cdn.firefox.com.cn is served via ChinaCache CDN and the cert is valid until next year.

[[e-mail]1 ~]$ curl -v https://marketplace.cdn.firefox.com.cn
* About to connect() to marketplace.cdn.firefox.com.cn port 443 (#0)
*   Trying 223.202.35.86... connected
* Connected to marketplace.cdn.firefox.com.cn (223.202.35.86) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSL connection using TLS_RSA_WITH_AES_256_CBC_SHA
* Server certificate:
* 	subject: CN=cdn04.ccedge.net,OU=COMODO SSL Unified Communications,OU=Domain Control Validated
* 	start date: Jul 31 00:00:00 2013 GMT
* 	expire date: Jul 31 23:59:59 2015 GMT
* 	common name: cdn04.ccedge.net
* 	issuer: CN=COMODO SSL CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB


The PEK1 zlb has a vserver configured for marketplace.cdn.firefox.com.cn and is no longer used/needed. I have filed bug 1068677 for cleanup.