Closed Bug 729424 Opened 12 years ago Closed 12 years ago

SSL Certificate for landfill.bugzilla.org expires at midnight UTC 24/03/12

Categories

(Developer Services :: General, task)

Product:
Developer Services
Component:
General
Platform:
All
Other
Type:
task
Priority:
Not set
Severity:
minor

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: fox2mike, Assigned: fox2mike)

Details

(Whiteboard: Geotrust OrderID: 8459453) 

See summary, do we need this renewed? 

(got an email from digicert saying this is expiring)
Assignee: server-ops → server-ops-devservices
Group: infra
Component: Server Operations → Server Operations: Developer Services
QA Contact: phong → shyam
(In reply to Shyam Mani [:fox2mike] from comment #0)
> See summary, do we need this renewed? 

yes, please renew this certificate.
Dave/mrz,

Do we know why we got a digicert for this and not one from geotrust?
(In reply to Shyam Mani [:fox2mike] from comment #2)
> Do we know why we got a digicert for this and not one from geotrust?

I don't.
No idea but you should ask mrz if there's a reason as he got the cert, if I read bug 537861 correctly. However, I don't there was any real reason, other than MoCo happened to be using DigiCert in 2010?

Can you manage this renewal on your own or do you need me to get you a CSR or something?
(In reply to Teemu Mannermaa (:wicked) from comment #4)
> Can you manage this renewal on your own or do you need me to get you a CSR
> or something?

If you guys will be doing the install yourselves, it's better to attach the CSR to the bug, else I can go ahead and do it.
Assignee: server-ops-devservices → shyam
Wicked, poke!
Oops, sorry, thanks for the poke. I'll do the CSR for this. I wonder if we should get some SANs while we at it. Is it more expensive that way? There's at least landfill.mozilla.org that points to the server and people have been known to try that.
Yes, SANs are more expensive and also take more time.
Summary: SSL Certificate for landfill.bugzilla.org expires in 29 days → SSL Certificate for landfill.bugzilla.org expires at midnight UTC 24/03/12
I thought so.. maybe we'll go with the same cert as before then. Here we go (with a 2048 bit key as they seem to be required by CAs):

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Dear Shyam Mani,

Congratulations! GeoTrust has approved your request for a Enterprise SSL certificate. Your certificate is included at the end of this email.

INSTALLATION INSTRUCTIONS

1. INSTALL CERTIFICATE:
Install the X.509 version of your certificate included at the end of this e-mail.
For installation instructions for your SSL Certificate, go to:
http://www.geotrust.com/support/installation-instructions/index.html

2. INTERMEDIATE CERTIFICATE ADVISORY:
You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly

You can also get your GeoTrust intermediate Certificates at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST

4. INSTALL THE GEOTRUST TRUE SITE SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the GeoTrust True Site Seal can be found on the following link:
https://www.geotrust.com/support/true-businessid/true-site-seal/

Visit the GeoTrust Support Web site, where you will find a range of support tools to help you:
http://www.geotrust.com/support

Best regards,

GeoTrust Customer Support
http://www.geotrust.com/support
Hours of Operation: Mon - Fri 05:00 - 17:00 (PST)
Email:     esslorders@geotrust.com
Web:       http://www.geotrust.com
Phone:     1-866-436-8787 or 1-678-366-8399
Live Chat: http://www.geotrust.com/support


** MICROSOFT IIS and TOMCAT USERS
Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal:
https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually.

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

All done, please install this and the intermediary cert.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Whiteboard: Geotrust OrderID: 8459453
Yay, thanks! Installed and tests as good:

Common Name: landfill.bugzilla.org
Issuing CA: GeoTrust SSL CA
Organization: Mozilla Corporation
Valid from March 18, 2012 to March 21, 2014 (729 days)
Key Size: 2048 bits
Status: RESOLVED → VERIFIED
Component: Server Operations: Developer Services → General
Product: mozilla.org → Developer Services
You need to log in before you can comment on or make changes to this bug.