1317546 - repair vr.mozilla.org CNAME mozvr.com (and SSL certificate)

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[:Atoll]

vr.mozilla.org CNAME mozvr.com

This CNAME exists, but it doesn't work anymore. http://vr.mozilla.org runs into a cloudflare error, because the mozvr site isn't configured with awareness of it, and https://vr.mozilla.org produces a cert name mismatch, for the same reason.

:cvan, you were recently associated with a mozvr.com requests. Can you confirm that it's okay for us to delete vr.m.o from DNS and revoke its SSL certificate?

Comment 1

[Christopher Van Wiemeersch [:cvan]]

I don't recall receiving the cert, and I was having DNS issues. Can you send me the info again? I'd like to get it working, but I spent too much time on it and gave up.

Comment 2

[:Atoll]

Can do! Could you please upload your GPG key fingerprint to https://login.mozilla.com/ so I can encrypt the private key to you?

Comment 3

[Joey Krejci [:joeyk]]

hey :cvan shall we just defer this repair until you're ready to switch hosting to vr.mozilla.org? This should get repaired automagically when that happens. Let me know, thanks!

Comment 4

[Christopher Van Wiemeersch [:cvan]]

I added my GPG key fingerpint to https://login.mozilla.com/

Comment 5

[Christopher Van Wiemeersch [:cvan]]

Also need-info'ing Joey

Comment 6

[Joey Krejci [:joeyk]]

Hey cvan, do you just need the private key or the crt/pem as well?

Comment 7

[Christopher Van Wiemeersch [:cvan]]

crt and pem. Thanks!

Comment 8

[Christopher Van Wiemeersch [:cvan]]

Hi there, friendly ping? Sorry for keeping this for so long in your backlog, y'all.

Comment 9

[Joey Krejci [:joeyk]]

Hey cvan the cert was set to expire in May 2017, so I went ahead and renewed it preemptively as well. You're good to go until 
June 26 2018 now. I can't seem to get your GPG key imported though, the keyserver returns a "No Key Found". Can you re-upload that for me please so I can get those sent over to you? Thanks!

Comment 10

[Joey Krejci [:joeyk]]

https://gpg.mozilla.org/pks/lookup?search=0x3B7C9A2757C64CC25498743A517EF5D4ECAE6995&op=vindex

Public key link for reference

Comment 11

[:Atoll]

cvan, 'gpg --send-keys 0x3B7C9A275.....' will do the trick

Comment 12

[Christopher Van Wiemeersch [:cvan]]

atoll helped me. Joey, can you check again now?

Comment 13

[Joey Krejci [:joeyk]]

:cvan Got it. Sent the GPG encrypted key and pem file your way via email.

Comment 14

[Joey Krejci [:joeyk]]

Hey cvan am I good to close this out?

Comment 15

[Christopher Van Wiemeersch [:cvan]]

Thanks for your help, joeyk and atoll. The problem is comment 0 hasn't been fixed yet.

Could we have vr.mozilla.org set up on Amazon CloudFront (have decided to not use Cloudflare) with a CNAME to `mozvr.github.io`? If y'all would rather I open a new bug for that, that's fine.

Comment 16

[Joey Krejci [:joeyk]]

Tried reaching you over IRC the other day cvan, but can we meet up for a quick Vidyo chat Monday to get some clarification on what exactly needs to happen on our end? Let me know, thanks!

Comment 17

[Christopher Van Wiemeersch [:cvan]]

Hi, Joey, just messaged you on IRC and fox2mike too (he had messaged me earlier, but I also missed that).

Anyway, the request is to add a record for Mozilla's Amazon CloudFlare account for the following:

    vr.mozilla.org ⇒ CNAME mozvr.github.io

If there are more questions, I can meet with either/both of you on Vidyo today (Tuesday); let me know.

Comment 18

[Christopher Van Wiemeersch [:cvan]]

Friendly ping. Just wanted to see if we can get this CNAME added for vr.mozilla.org?

Comment 19

[Joey Krejci [:joeyk]]

(In reply to Christopher Van Wiemeersch [:cvan] from comment #18)
> Friendly ping. Just wanted to see if we can get this CNAME added for
> vr.mozilla.org?

Hey Chris,

Sorry about the delay on this, been super swamped over here in WebOps land. I put some time on the calendar to take care of this with ericz tomorrow. I will let you know once its completed, sorry again!

Comment 20

[Christopher Van Wiemeersch [:cvan]]

Thanks, no worries!

Comment 21

[Joey Krejci [:joeyk]]

Set up CloudFront CDN Distribution

Origin          CNAME
vr.mozilla.org  mozvr.github.io


Changed CNAME in inventory to point to CDN

FQDN 		Target 	
vr.mozilla.org 	CNAME 	d2x8l6w5zbpr4p.cloudfront.net


This should hopefully accomplish what you wanted? If not let me know, thanks!

Comment 22

[Joey Krejci [:joeyk]]

Confirmed working now via browser and curl. Closing bug out.

jkrejci-23847:.git jkrejci$ curl -I vr.mozilla.org
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 01 May 2017 20:12:40 GMT
Content-Type: text/html
Content-Length: 183
Connection: keep-alive
Location: https://vr.mozilla.org/
X-Cache: Redirect from cloudfront
Via: 1.1 3d183dc06807f77c9361cf878faaed82.cloudfront.net (CloudFront)
X-Amz-Cf-Id: tdppnSS7wb6UUB73CHGEGH9knERNfahjWz32Gmo1z0NPJbsQu7rIIg==

jkrejci-23847:.git jkrejci$ curl -I https://vr.mozilla.org
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Server: GitHub.com
Location: http://mozvr.com/
X-GitHub-Request-Id: 6C0A:1613A:31B212C:4100EEA:59079628
Accept-Ranges: bytes
Date: Mon, 01 May 2017 20:10:16 GMT
Via: 1.1 varnish, 1.1 1c618ea0f595386e66803b2a07e0f4dc.cloudfront.net (CloudFront)
X-Served-By: cache-iad2133-IAD
X-Cache-Hits: 0
X-Timer: S1493669417.854337,VS0,VE3
X-Fastly-Request-ID: e1801603bedbfe44d12a2ddff09a87119245fb3e
Vary: Accept-Encoding
Age: 494
X-Cache: Hit from cloudfront
X-Amz-Cf-Id: rAlGHFYy47_fsUmDRjsTfxJJS_Yk2bX13mepIUZ41cT6yP0jW4_xOQ==

Comment 23

[Joey Krejci [:joeyk]]

clearing the needinfo, ignore.