1075738 - Please reissue the SSL cert for telemetry.mozilla.org to add alerts.telemetry.mozilla.org

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Mark Reid [:mreid]]

+++ This bug was initially created as a clone of Bug #1022803 +++

Please add "alerts.telemetry.mozilla.org" as an alternative name on the telemetry.mozilla.org SSL Cert.

This will be used for the `medusa` app which notifies developers about regressions using Telemetry data.

Comment 1

[C. Liang [:cyliang]]

telemetry.mozilla.org cert


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 2

[C. Liang [:cyliang]]

Intermediate cert


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[C. Liang [:cyliang]]

Ugh, so it turns out that my attempt to use an existing private key + CSR combo failed.  The intermediate cert in comment #2 is good; there's a new certificate for telemetry.mozilla.org listed below.  The load balancer has been updated with the new certificate.  

Please let me know if you need a new copy of the private key: I can send it under separate cover if folks have GPG keys handy.


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 4

[Mark Reid [:mreid]]

Which load balancer has been set up with the new cert?

Comment 5

[C. Liang [:cyliang]]

I've updated the certificate on the Zeus load balancer, which was using the older telemetry.mozilla.org cert on incoming-telemetry-zlb.vips.scl3.mozilla.com (63.245.215.99).

Comment 6

[Mark Reid [:mreid]]

Ok cool thanks.  Benson, can you update the cert in AWS?

Comment 7

[C. Liang [:cyliang]]

New key sent to Benson under separate cover.

Comment 8

[Benson Wong [:mostlygeek]]

SSL certificate added into aws. This is in both the moz-svc-dev (old dev iam) and the new prod iam (moz-svc-prod) under the name: telemetry-2014-08-10.