1188108 - Requesting cert files for One and Done for Heroku

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Bob Silverberg [:bsilverberg]]

In order to provision an SSL endpoint [1] for the dev, stage and prod versions of the One and Done web site on Heroku, we need to upload cert files. This is a request for those files.

The three urls that will be served are:
https://oneanddone-dev.allizom.org
https://oneanddone.allizom.org
https://oneanddone.mozilla.org

[1] https://devcenter.heroku.com/articles/ssl-endpoint#provision-the-add-on

Comment 1

[Ryan Watson [:w0ts0n]]

Hi, is this on the Mozilla heroku instance? 

Sorry for the delay.

Comment 2

[Ryan Watson [:w0ts0n]]

I only see "oneanddone-dev" on the mozilla heroku account. Feel free to ping me on IRC and we can get this worked out.

Comment 3

[Bob Silverberg [:bsilverberg]]

Thanks Ryan. As discussed on IRC, I’ve only created the dev site on Heroku for now, but plan on adding the staging and prod sites once I get the dev site working. Can you add the certs for just the dev site for now, and then for the other sites later?

Comment 4

[Ryan Watson [:w0ts0n]]

Hey Bob,

I believe this is all done! Do you need me to CNAME https://oneanddone-dev.allizom.org to the heroku instance?

heroku certs:add star_allizom_org.crt wildcard.allizom.org.key --app oneanddone-dev
Resolving trust chain... done
Adding SSL Endpoint to oneanddone-dev... done
WARNING: ssl_cert ["provides no domain(s) that are configured for this Heroku app"]
oneanddone-dev now served by shizuoka-2239.herokussl.com
Certificate details:
Common Name(s): *.allizom.org
                allizom.org

Expires At:     2016-12-06 12:00 UTC
Issuer:         /C=US/ST=CA/L=Mountain View/O=Mozilla Corporation/CN=*.allizom.org
Starts At:      2013-12-02 00:00 UTC
Subject:        /C=US/ST=CA/L=Mountain View/O=Mozilla Corporation/CN=*.allizom.org
SSL certificate is verified by a root authority.
updating Heroku CLI...done. Updated to 3.41.5

Comment 5

[Bob Silverberg [:bsilverberg]]

Yes please, and thank you!

Comment 6

[Ryan Watson [:w0ts0n]]

I think we are done here?

host -i oneanddone-dev.allizom.org
oneanddone-dev.allizom.org is an alias for shizuoka-2239.herokussl.com.
shizuoka-2239.herokussl.com is an alias for elb071108-831016103.us-east-1.elb.amazonaws.com.
elb071108-831016103.us-east-1.elb.amazonaws.com has address 23.21.153.73
elb071108-831016103.us-east-1.elb.amazonaws.com has address 54.225.234.1
elb071108-831016103.us-east-1.elb.amazonaws.com has address 54.204.19.186

I've kept everything else in place should we need to switch it back. 

Do you want to file a separate bug when you're ready for stage/prod? Then once we are happy we can decom the current/old setup.  Feel free to ping me on IRC.

Comment 7

[Bob Silverberg [:bsilverberg]]

Thanks Ryan. It all seems to be working wonderfully. I will open other bugs for stage and prod when needed.