1336275 - seamonkeyproject.org's website update cron messages warning about hg.mozilla.org fingerprint

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Edmund Wong (:ewong)]

Post-holiday, the cron job that does the website update is now sending
messages to seamonkey-release@mo re: 

warning: hg.mozilla.org certificate with fingerprint 73:7f:ef:ab:68:0f:49:3f:88:91:f0:b7:06:69:fd:8f:f2:55:c9:56 not verified (check hostfingerprints or web.cacerts config setting)

I believe that host needs to have its fingerprints updated?  

Callek, who do I ask, as I'm not even sure which host this is on?

Comment 1

[:Atoll]

What's the hostname in the full headers of the cronmail?

Comment 2

[Edmund Wong (:ewong)]

it's from root@staticadm

Comment 3

[:Atoll]

This was fallout from the http->https redirect on hg.m.o, and was tempfixed by adding:

[hostfingerprints]
hg.mozilla.org = 73:7F:EF:AB:68:0F:49:3F:88:91:F0:B7:06:69:FD:8F:F2:55:C9:56

to the end of staticadm:/data/static/build/seamonkeyproject-org/.hg/hgrc

While I was in there, I also updated the default pull path to https:

[paths]
default = http://hg.mozilla.org/SeaMonkey/seamonkey-project-org

So that's one less thing using non-HTTPS HG, hooray.

:ewong, this should now be resolved, and silent again. Please reopen if the messages continue to arrive after ~1hr from now (or less).

Comment 4

[Edmund Wong (:ewong)]

(In reply to Richard Soderberg [:atoll] from comment #3)
> This was fallout from the http->https redirect on hg.m.o, and was tempfixed
> by adding:
> 
> [hostfingerprints]
> hg.mozilla.org = 73:7F:EF:AB:68:0F:49:3F:88:91:F0:B7:06:69:FD:8F:F2:55:C9:56
> 
> to the end of staticadm:/data/static/build/seamonkeyproject-org/.hg/hgrc
> 
> While I was in there, I also updated the default pull path to https:
> 
> [paths]
> default = http://hg.mozilla.org/SeaMonkey/seamonkey-project-org
> 
> So that's one less thing using non-HTTPS HG, hooray.
> 
> :ewong, this should now be resolved, and silent again. Please reopen if the
> messages continue to arrive after ~1hr from now (or less).

Thanks :atoll!  Confirmed fixed as I'm not receiving anything from cron now.