1134685 - SSL cert for masterfirefoxos.mozilla.org

Status: VERIFIED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Josh Mize [:jgmize]]

Please generate an SSL cert for masterfirefoxos.mozilla.org for installation into an AWS ELB instance and send me a copy encrypted with my https://keybase.io/jgmize public key.

Comment 1

[C. Liang [:cyliang]]

masterfirefoxos.mozilla.org cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 2

[C. Liang [:cyliang]]

Intermediate DigiCert CA cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[C. Liang [:cyliang]]

Key sent under separate cover.

Comment 4

[Josh Mize [:jgmize]]

Thanks :cyliang!

I created a new ELB: masterfirefoxos-mozilla-org-1196681076.us-east-1.elb.amazonaws.com

I then installed the cert and key you provided on it, configured it to point to the existing deis cluster instances, and then verified everything was working by temporarily modifying my /etc/hosts to map masterfirefoxos.mozilla.org to one of the IP addresses for the ELB.