1243047 - Setup ssl endpoint under releng-tc-coalesce heroku app

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Jake Watkins [:dividehex]]

Once the *-cert for .mozilla-releng.net has been acquired, we need to add an ssl endpoint addon to the releng-tc-coalesce heroku app and upload the cert.

Comment 1

[Jake Watkins [:dividehex]]

SSL endpoint addon has been added and cert/key had been uploaded.


Endpoint                  Common Name(s)                            Expires               Trusted
------------------------  ----------------------------------------  --------------------  -------
oita-54541.herokussl.com  *.mozilla-releng.net, mozilla-releng.net  2019-01-30 12:00 UTC  True

Comment 2

[Jake Watkins [:dividehex]]

I've added the custom domain 'coalesce.mozilla-releng.net' via heroku and created a cname.

* Rebuilt URL to: https://coalesce.mozilla-releng.net/
* Hostname was NOT found in DNS cache
*   Trying 54.235.100.231...
* Connected to coalesce.mozilla-releng.net (54.235.100.231) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using ECDHE-RSA-AES128-GCM-SHA256
* Server certificate:
*        subject: C=US; ST=California; L=Mountain View; O=Mozilla Corporation; CN=*.mozilla-releng.net
*        start date: 2016-01-26 00:00:00 GMT
*        expire date: 2019-01-30 12:00:00 GMT
*        issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA
*        SSL certificate verify ok.
> HEAD / HTTP/1.1
> User-Agent: curl/7.35.0
> Host: coalesce.mozilla-releng.net
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Connection: keep-alive
Connection: keep-alive
* Server gunicorn/19.4.1 is not blacklisted
< Server: gunicorn/19.4.1
Server: gunicorn/19.4.1
< Date: Tue, 26 Jan 2016 20:36:51 GMT
Date: Tue, 26 Jan 2016 20:36:51 GMT
< Content-Type: application/json
Content-Type: application/json
< Content-Length: 32
Content-Length: 32
< Via: 1.1 vegur
Via: 1.1 vegur

<
* Connection #0 to host coalesce.mozilla-releng.net left intact