1834817 - Renew aus5.mozilla.org 2023

Status: RESOLVED FIXED

(Cloud Services :: Operations: Balrog, task)

Description

[Jon Buckley [:jbuck]]

On 2023-06-16 the current certificate for aus5.mozilla.org is expiring. The certificate is currently a Digicert-issued certificate. Firefox 101+ GMP updates are no longer pinned to DigiCert SHA2 Secure Server CA but we'll re-issue this with a Digicert certificate using that intermediate CA for this year. Maybe next year we'll try Let's Encrypt!

Worth noting that the DigiCert Global Root CA will be distrusted as of April 15 2026, so when we do the 2025 version of this renewal, that'll be the last time we can use the DigiCert SHA2 Secure Server CA intermediate CA.

Comment 1

[Jon Buckley [:jbuck]]

Order #436155321 submitted to Digicert

Comment 2

[Jon Buckley [:jbuck]]

Order has been approved and I've uploaded it into GCP so we can switch at any time

Comment 3

[Jon Buckley [:jbuck]]

:bhearsum and I will do the certificate rotation tomorrow morning (2023-05-25)

PR to codify the certificate change: https://github.com/mozilla-services/cloudops-infra/pull/4895

Comment 4

[[e-mail] (:bhearsum)]

Crosslinking https://github.com/mozilla-releng/balrog/pull/2869 for the necessary update to our records in Balrog.

Comment 5

[Jon Buckley [:jbuck]]

Rotation complete