please CNAME ec2-manager{,-staging}.taskcluster.net to toyama-73636.herokussl.com

RESOLVED FIXED

Status

Infrastructure & Operations
Infrastructure: DNS
RESOLVED FIXED
6 months ago
4 months ago

People

(Reporter: jhford, Unassigned)

Tracking

Details

Unless this isn't the most recent endpoint for us to be using.
(Reporter)

Updated

6 months ago
Summary: please CNAME pulse.taskcluster.net to toyama-73636.herokussl.com → please CNAME ec2-manager{,-staging}.taskcluster.net to toyama-73636.herokussl.com
I'll add these names to the SAN cert
I've added the two CNAMEs pointing to toyama-73636.herokussl.com, give it about 30 minutes to begin propagating
dustin@jemison ~ $ cat tmp/auth_taskcluster_net.crt 
-----BEGIN CERTIFICATE-----
MIIHdzCCBl+gAwIBAgIQBsogBPqF1eh726KrwHL37TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwNjIxMDAwMDAwWhcN
MTkwMzIyMTIwMDAwWjB3MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
YTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEcMBoGA1UEChMTTW96aWxsYSBDb3Jw
b3JhdGlvbjEdMBsGA1UEAxMUYXV0aC50YXNrY2x1c3Rlci5uZXQwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nu5t8QUGbmetwsYgGxWegrMk4kdDmoCP
BoR7OqvM4ZHKZLAp0/lKs675+bL+3yoBV6KOzIhn3modm8RA0/1E4KknCqEYoqvG
q/5uup8hyCP9b8Kc1k3kvJcpTNa9axjN8C+q8kG6tRTdEX8DB+ya8JFZ7TP+CSgZ
9a+wJdpjOSfxDcqyucZKjXqA2LL2s5g0hWMyZ1ROTnXOX7/RIKqSgQxMJeWlvnpV
QfeNPnLIL8HtgYoyg3Iy6mFvvP3eSwwrSnDdLgs25/taRvxaHjZEM44YEXM83V8k
0Y5DQWUN3YbVlOCL5OhjV1bxpeZ+SdLlCa8thxYJQyrTQTD4xk2LAgMBAAGjggQn
MIIEIzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU
+29Vnc8M34j50jc8dAAiB47xvx4wggJpBgNVHREEggJgMIICXIIUYXV0aC50YXNr
Y2x1c3Rlci5uZXSCH2F3cy1wcm92aXNpb25lci50YXNrY2x1c3Rlci5uZXSCHGNs
b3VkLW1pcnJvci50YXNrY2x1c3Rlci5uZXSCGmNvcnMtcHJveHkudGFza2NsdXN0
ZXIubmV0ghZldmVudHMudGFza2NsdXN0ZXIubmV0ghZnaXRodWIudGFza2NsdXN0
ZXIubmV0ghVob29rcy50YXNrY2x1c3Rlci5uZXSCFWluZGV4LnRhc2tjbHVzdGVy
Lm5ldIIVbG9naW4udGFza2NsdXN0ZXIubmV0giBwdWJsaWMtYXJ0aWZhY3RzLnRh
c2tjbHVzdGVyLm5ldIIbcHVyZ2UtY2FjaGUudGFza2NsdXN0ZXIubmV0ghVxdWV1
ZS50YXNrY2x1c3Rlci5uZXSCGXNjaGVkdWxlci50YXNrY2x1c3Rlci5uZXSCF3Nl
Y3JldHMudGFza2NsdXN0ZXIubmV0ghV0b29scy50YXNrY2x1c3Rlci5uZXSCF3N0
YXRzdW0udGFza2NsdXN0ZXIubmV0ghRkb2NzLnRhc2tjbHVzdGVyLm5ldIIXc2No
ZW1hcy50YXNrY2x1c3Rlci5uZXSCGnJlZmVyZW5jZXMudGFza2NsdXN0ZXIubmV0
ghZub3RpZnkudGFza2NsdXN0ZXIubmV0ghVwdWxzZS50YXNrY2x1c3Rlci5uZXSC
I2VjMi1tYW5hZ2VyLXN0YWdpbmcudGFza2NsdXN0ZXIubmV0ghtlYzItbWFuYWdl
ci50YXNrY2x1c3Rlci5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vc3NjYS1zaGEyLWcxLmNybDAvoC2gK4YpaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nMS5jcmwwTAYDVR0gBEUwQzA3BglghkgB
hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0T
AQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEACriZLJIMHL6/zxQTx0UCmqNrZfkW
mUAOojKAPFpkdqLcIiPXfdsuuemQr7JXXMGyZRZDyfMaayThae4ZoX0E58MEwK5M
NMvEP8O7uuqEQMhDlECxbu4k/Sw7ojCYltEF41T90J8tj87eaEbMAhlM39Ars/EM
WPKNWRVGoZlPXnBkpz2spPk7w+HKi9Bf27RcIGxHsMjCa1NFypB4PeCdTxeocKuM
3FSpL9LHZoBp+CO751Gs54BgeeDpg5kvf9gvP5Bs8XopfIsQFMqbWrkdEjnIhY9p
h/om2jgbU1H71l8NTYVbzVcKEszxCprrA4n7Hb78kf29tQ7IHJrIArlQfA==
-----END CERTIFICATE-----

dustin@jemison ~ ($?=130) $ cat tmp/DigiCertCA.crt 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Greg, can you do Heroku? John, can you do docker-cloud and AWS in your morning? I can pitch in when my day starts.
Flags: needinfo?(jhford)
Flags: needinfo?(garndt)

Comment 4

6 months ago
Heroku has been updated.
Flags: needinfo?(garndt)
AWS:

{
    "ServerCertificateMetadata": {
        "ServerCertificateId": "ASCAJNYDY6A7VO6X56CY6", 
        "ServerCertificateName": "taskcluster_net_bug1375132", 
        "Expiration": "2019-03-22T12:00:00Z", 
        "Path": "/cloudfront/", 
        "Arn": "arn:aws:iam::692406183521:server-certificate/cloudfront/taskcluster_net_bug1375132", 
        "UploadDate": "2017-06-22T14:49:17.548Z"
    }
}

corresponding Cloudfront updates are processing and will be done in a few minutes.
Dustin, my understanding is that you took care of docker-cloud, is that true?  If not, I'm still not entirely sure how to follow the mana page.
Flags: needinfo?(jhford) → needinfo?(dustin)
No, I just did AWS.
Flags: needinfo?(dustin)
See Also: → bug 1377442

Comment 8

4 months ago
Is there anything else actionable here?
I guess nothing has failed in docker-cloud in the last two months, so either it got done and nobody said so, or it didn't get done and it doesn't matter.
Status: NEW → RESOLVED
Last Resolved: 4 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.