1532512 - aus2-community.mozilla.org SSL is expiring Apr 30

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Edmund Wong (:ewong)]

got a notification/ping that aus2-community.mozilla.org's certificate is
expiring.

I need to get this moving before it expires.

A few items to note:

1. aus2-community.mozilla.org isn't part of Mozilla's Infrastructure
2. like bug 13242783, I need to get the updated certificate from
   infra ops.

Thanks!

Comment 1

[Ludovic Hirlimann [:Usul]]

https://bugzilla.mozilla.org/enter_bug.cgi?product=Infrastructure%20%26%20Operations&component=SSL%20Certificates is where to file the bug.

Comment 2

[Ryan C [:ryanc] (UTC-4)]

⋊> ~/w/puppet on master ⨯ checkcert aus2-community.mozilla.org 443 11:58:06
0 s:/C=US/ST=California/L=Mountain View/O=Mozilla Foundation/OU=Automatic Update System/CN=aus2-community.mozilla.org
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
notBefore=Mar 14 00:00:00 2018 GMT
notAfter=Apr 30 12:00:00 2019 GMT
serial=08EE7F160919DCCA4C68C76C176C83CE

Comment 3

[Ryan C [:ryanc] (UTC-4)]

Edmund, can you provide a gpg fingerprint for me so I can encrypt the bundle?

Comment 4

[Edmund Wong (:ewong)]

(In reply to Ryan C [:ryanc] (UTC-4) from comment #3)

Edmund, can you provide a gpg fingerprint for me so I can encrypt the bundle?

Here's my fingerprint:

1DCC F28E DC20 EEB6 6A35 42ED C30E 23EA 9F7A 6048

and the Public Key block for good measure. :)

Thanks Ryan!

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=9E1L
-----END PGP PUBLIC KEY BLOCK-----

Comment 5

[Ryan C [:ryanc] (UTC-4)]

GPG'd bundle sent to [e-mail]

Comment 6

[Edmund Wong (:ewong)]

Confirmed receipt and installed.

Thanks Ryan!

Comment 7

[Rob Tucker [:rtucker]]

:ewong,
This certificate expires again soon. I see that the site is hosted in AWS, can it be switched to use ACM?

Thanks!