Closed Bug 1414294 Opened 7 years ago Closed 7 years ago

mdn-samples.mozilla.org is using an expired certificate

Categories

(Infrastructure & Operations :: Marketing Infrastructure, task)

Product:
Infrastructure & Operations
Component:
Marketing Infrastructure
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: jfkthame, Unassigned)

References

Details

Noticed when visiting an MDN page that embeds a sample from mdn-samples (look under Result at https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe)... instead of the expected content, the frame shows:

"Your connection is not secure

The owner of mdn-samples.mozilla.org has configured their website improperly. To protect your information from being stolen, Nightly has not connected to this website."
Assignee: nobody → server-ops-webops
Component: Other → WebOps: SSL and Domain Names
Product: Websites → Infrastructure & Operations
QA Contact: smani
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/5792]
https://www.dropbox.com/s/hbrwigp7993d3kd/Screenshot%202017-11-06%2023.32.01.png?dl=0 is the domains currently configured in this ACM cert. 

Moving this over to Ben's team and will ping them on IRC/Slack so they can get this fixed up ASAP. Thanks for the report!
Assignee: server-ops-webops → nobody
Component: WebOps: SSL and Domain Names → Marketing Infrastructure
QA Contact: smani → bsternthal
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/5792]
Flags: needinfo?(rjohnson)
Blocks: 1410788
I only know that this is a domain/service/certificate that :sheppy (eshepherd@mozilla.com) maintains. :
Flags: needinfo?(rjohnson)
Josh Mize has been working with Eric Shepherd on resolving this.
mdn-samples.mozilla.org is currently hosted on an EC2 instance maintained by :sheppy in an AWS account dedicated to this app. After discussing the current hosting situation with :sheppy and reviewing the code, I've created a new deployment[0] on the same Kubernetes cluster we have the other MDN services deployed to, with an ACM-issued cert valid for both mdn-samples.moz.works and mdn-samples.mozilla.org. The next step is to make the DNS record for mdn-samples.mozilla.org a CNAME to mdn-samples.moz.works. 

[0] https://github.com/mdn/samples-server/pull/47/files
Worked with :jgmize to modify the existing mdn-samples.mozilla.org CNAME to point to mdn-samples.moz.works.  This is now confirmed working.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.