1004652 - Investiate expired SSL certificate warnings on pp-zlb.phx.mozilla.net

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Philippe M. Chiasson (:gozer)]

Just noticed these, smells like either dead sites, or sites moved elsewhere.

 	Virtual server ganglia.mozilla.org - https
	
Public SSL certificate 'ganglia.mozilla.org' expired on Fri, 29 Nov 2013 09:04:27 GMT
This error was reported by all traffic manager machines.

	Virtual server graphite-new - https
	
Public SSL certificate 'graphite.mozilla.org' expired on Sat, 30 Nov 2013 16:47:31 GMT
This error was reported by all traffic manager machines.

	Virtual server intranet.mozilla.org - https
	
Public SSL certificate 'intranet.mozilla.org' expired on Mon, 25 Nov 2013 18:33:41 GMT
This error was reported by all traffic manager machines.

	Virtual server pto.mozilla.org - https
	
Public SSL certificate 'pto.mozilla.org' expired on Mon, 03 Feb 2014 06:00:28 GMT
This error was reported by all traffic manager machines.

Comment 1

[Jake Maul [:jakem]]

I have fixed this by updating the certs on the PHX1 ZLB cluster for graphite and ganglia, and disabling the vservers for pto and intranet. Both are actually handled elsewhere and the ones here were legacy junk.

For the record both ganglia and graphite resolve to SCL3, not PHX1. I updated them here because they are active services, and I suspect these may be intended as some sort of failover or secondary config. Rather than dig into that, I took the quicker way out and just fixed the certs. :)