Closed Bug 1834817 Opened 11 months ago Closed 11 months ago

Renew aus5.mozilla.org 2023

Categories

(Cloud Services :: Operations: Balrog, task)

task

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: jbuck, Assigned: jbuck)

References

Details

On 2023-06-16 the current certificate for aus5.mozilla.org is expiring. The certificate is currently a Digicert-issued certificate. Firefox 101+ GMP updates are no longer pinned to DigiCert SHA2 Secure Server CA but we'll re-issue this with a Digicert certificate using that intermediate CA for this year. Maybe next year we'll try Let's Encrypt!

Worth noting that the DigiCert Global Root CA will be distrusted as of April 15 2026, so when we do the 2025 version of this renewal, that'll be the last time we can use the DigiCert SHA2 Secure Server CA intermediate CA.

Order #436155321 submitted to Digicert

Order has been approved and I've uploaded it into GCP so we can switch at any time

:bhearsum and I will do the certificate rotation tomorrow morning (2023-05-25)

PR to codify the certificate change: https://github.com/mozilla-services/cloudops-infra/pull/4895

Assignee: nobody → jbuckley
Status: NEW → ASSIGNED

Crosslinking https://github.com/mozilla-releng/balrog/pull/2869 for the necessary update to our records in Balrog.

Rotation complete

Status: ASSIGNED → RESOLVED
Closed: 11 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.