1304763 - Deploy SHA-1 Bouncer Endpoint

Status: VERIFIED FIXED

(Cloud Services :: Operations: Miscellaneous, task)

Comment 1

[Julien Vehent]

We need to set it up under *.allizom.org in order to reuse the sha1 wildcard cert that's valid until 2017.

Comment 2

[Jeremy Orem [:oremj]]

In that case, I'll make it download-sha1.allizom.org

Comment 3

[Jeremy Orem [:oremj]]

curl -v https://download-sha1.allizom.org/\?product\=Firefox-49.0-ssl
*   Trying 52.202.115.83...
* Connected to download-sha1.allizom.org (52.202.115.83) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate: *.allizom.org
* Server certificate: DigiCert High Assurance CA-3
* Server certificate: DigiCert High Assurance EV Root CA
> GET /?product=Firefox-49.0-ssl HTTP/1.1
> Host: download-sha1.allizom.org
> User-Agent: curl/7.49.1
> Accept: */*
>
< HTTP/1.1 302 Found
< Cache-Control: max-age=60
< Content-Type: text/html; charset=utf-8
< Date: Fri, 23 Sep 2016 16:47:34 GMT
< Location: https://download-sha1.cdn.mozilla.net/firefox/releases/49.0/win32/en-US/Firefox%20Setup%2049.0.exe
< Content-Length: 121
< Connection: keep-alive
<
<a href="https://download-sha1.cdn.mozilla.net/firefox/releases/49.0/win32/en-US/Firefox%20Setup%2049.0.exe">Found</a>.

Comment 4

[Stephen Donner [:stephend] Not actively reading bugmail]

Attachment: Post-fix screenshot, showing SHA-1 302/endpoints

Comment 5

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified FIXED.