1000871 - Please reissue the SSL cert for telemetry.mozilla.org to add loop.telemetry.mozilla.org

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Mark Reid [:mreid]]

Per Bug 998996, please add "loop.telemetry.mozilla.org" as an alternative name (for Loop error submissions) on the telemetry.mozilla.org SSL Cert.

Comment 1

[Chris Turra [:cturra]]

grabbing this.

Comment 2

[Chris Turra [:cturra]]

below is the newly issued public and intermediate certificates that include this new subject alternative. i have already added it to zeus, but if you need to update it anywhere the same private key was used.


telemetry_mozilla_org
---

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIQC6W/Pp8/pc1pLjH7gvKpkjANBgkqhkiG9w0BAQUFADBp
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSgwJgYDVQQDEx9EaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBFViBDQS0xMB4XDTEzMDkxMjAwMDAwMFoXDTE1MDkxNzEyMDAwMFowggEEMR0w
GwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJV
UzEbMBkGCysGAQQBgjc8AgECEwpDYWxpZm9ybmlhMREwDwYDVQQFEwhDMjc1OTIw
ODEeMBwGA1UECRMVNjUwIENhc3RybyBTdCBTdGUgMzAwMQ4wDAYDVQQREwU5NDA0
MTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1Nb3VudGFpbiBW
aWV3MRwwGgYDVQQKExNNb3ppbGxhIENvcnBvcmF0aW9uMR4wHAYDVQQDExV0ZWxl
bWV0cnkubW96aWxsYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdNfMY39abFwkHEgeey8TTbhk4KQkKNCrahALQ+2S+6RnJtDLV5HwvMQp8BJpO
BmW9IbB9+NWpV743VTpTpDKHeibP8miM3CtvOZYnmFIIZgljxWj8l36+UobAg/J6
oUKKBESa8yJu/csx4SuwgxlPoeIvELe0VrCosqt4F95ndG0m9tgykBJC/DeoO9+p
6jLvGihnVox8T/ZL8MDds0a3UAujSnI+XB2MfSDHmomL+ycec/E9wzT3QPXFfdIl
5lfjpx5obi3j5ZuAvO7nPhbxAec8drG0ujCpK48TlereUT4DEw8BRIzVUkdHzCov
f6bM6ObXKwFT1sNTY0ey9XXJAgMBAAGjggJiMIICXjAfBgNVHSMEGDAWgBRMWMsl
8EFPUvQoyIFDm6aooOaS5TAdBgNVHQ4EFgQUwIE/6bvPHxu/cklCfKVkR35Edbow
gbYGA1UdEQSBrjCBq4IVdGVsZW1ldHJ5Lm1vemlsbGEub3Jngh5pbmNvbWluZy50
ZWxlbWV0cnkubW96aWxsYS5vcmeCGnRlbGVtZXRyeS1kYXNoLm1vemlsbGEub3Jn
ghpmeG9zLnRlbGVtZXRyeS5tb3ppbGxhLm9yZ4IeYW5hbHlzaXMudGVsZW1ldHJ5
Lm1vemlsbGEub3Jnghpsb29wLnRlbGVtZXRyeS5tb3ppbGxhLm9yZzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGMGA1UdHwRc
MFowK6ApoCeGJWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9ldmNhMS1nNC5jcmww
K6ApoCeGJWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9ldmNhMS1nNC5jcmwwQgYD
VR0gBDswOTA3BglghkgBhv1sAgEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzB9BggrBgEFBQcBAQRxMG8wJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBHBggrBgEFBQcwAoY7aHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWQ0EtMS5jcnQw
DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEArYyxWa/+QzmCdiK1QTRb
MoCsVaCeCyN6VfBjdrBnL0IB+MZv/I03N9BnzSbnJufz81if4ygv0B7fuTnDfMyz
2gb8i+q29EaC54ngAoRRx9UoEt9Q35kQnplR13yO8jOzKHMIh4zIMvIFA13cho9a
9aqk5RkHhJXuBbkvXMd0fcPrq0aVW+1W1HB7d86+UH84CiLI4aYD2X4oLdQUclmM
maDRMrkVUGfqslwPxzekB0pehFU4BTeFH2oK5rSpnuNxHMvoR8K5x9UqeogZbDZK
oN3v/dGtBOmV5MVGrXD+ZAqslIEaVfVI22Au10yqnm0Sv55csi2irBvvwg640kwT
HA==
-----END CERTIFICATE-----


intermediate:
---

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Mark Reid [:mreid]]

Benson, what's the next step for getting this updated cert into the telemetry Load Balancer in AWS?

Comment 4

[Benson Wong [:mostlygeek]]

I'll do it. For the record: https://mana.mozilla.org/wiki/display/SVCOPS/Using+SSL+Certs+in+AWS

Comment 5

[Mark Reid [:mreid]]

Thanks!