510235 - Need an SSL cert for spreadfirefox.com

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Alex Buchanan [:abuchanan]]

Hey,

For bug 412354, we'll be working on preparing spreadfirefox.com for SSL traffic.

Last I checked, we don't have any SSL certificate for this domain.  Filing this bug to get that process rolling.

Thanks

Comment 1

[matthew zeier [:mrz]]

On delay while geotrust adds this domain to Mozilla's portal.

Comment 2

[matthew zeier [:mrz]]

Added.  Just need a CSR now.  shyam, generate and submit to https://products.geotrust.com/orders/essl/essl_wildcard.do?ref=680835MOZ54767& .

Comment 3

[matthew zeier [:mrz]]

yikes, wrong url.  Use 

https://products.geotrust.com/orders/essl/esslp.do?ref=680835MOZ54767&.

Comment 4

[Shyam Mani [:fox2mike]]

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 5

[Shyam Mani [:fox2mike]]

Ignore the CSR in comment #4 please use this instead :

-----BEGIN CERTIFICATE REQUEST-----
MIIDSjCCAjICAQAwgbQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh
MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRwwGgYDVQQKExNNb3ppbGxhIENvcnBv
cmF0aW9uMRMwEQYDVQQLEwpPcGVyYXRpb25zMR4wHAYDVQQDExV3d3cuc3ByZWFk
ZmlyZWZveC5jb20xJTAjBgkqhkiG9w0BCQEWFmhvc3RtYXN0ZXJAbW96aWxsYS5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFfRRNPBFj1fidk2Y
oCKGcwg6zRrQfY2dCM7Go2pky2mkOoP5iN1LiUNIjrG1txzqzFOtpE39GY9gbIxs
iqzfACCxI7iR0O2T3jLnaubc1C+mIsmWB5xpbvYFpTJ8B0xWTzcmPi4lR+mUp1v4
AOZdS3KRznb+g4lt2jIjzGejkrL4/g4lw9H2ZJjjaEqTNdCcdDIvrI4xSOeX7lJE
h5b3o2itlbgVayuTuWoexVlE4AXzF1YXN4LIgtPiifnPsuLPi7Z8+oCMQP+3B9lD
a3bgIymO5m/q8jJIztb95zt3DSoKksvZwJI9CVblcFp+CJ//Nuew1QJBZ4H71/Vs
NNRPAgMBAAGgUDBOBgkqhkiG9w0BCQ4xQTA/MBEGCWCGSAGG+EIBAQQEAwIGQDAM
BgNVHRMBAf8EAjAAMBwGA1UdEQQVMBOCEXNwcmVhZGZpcmVmb3guY29tMA0GCSqG
SIb3DQEBBQUAA4IBAQAy0aJ4bw+QY+AOXoq9whjeWL2bfnc319MyLCdU7Z8K8URE
0q36GFBuNqZFtI78hcqyZtEid4VVDw0CKfrZvzq9H6a2BwL8HHB0mJAjhD+SoLAI
e8aTgyXLFfxEmy6k3uUlRThVQSlxVXLngwoe7GeQjEbxez9sC9AbFhkE6XENHayh
R0lG2x5WJWu11nA12MD4GjThBvCko8+GBH/cZjy2GcE9U7e3XWdALgpC2vRSJgBc
xdFABw7zOM+zPJK+cVHAAfJyBEsn5yMKyuG/D5EFIK7l9BtfXz9MvqC6XCRFgxQO
UtTKciPQ8T9AKuynQmqJAVoPDb/c8VC4yXfVm0UG
-----END CERTIFICATE REQUEST-----

Comment 6

[matthew zeier [:mrz]]

Your Web Server Certificate for www.spreadfirefox.com

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 7

[matthew zeier [:mrz]]

Added.


Sorry Shyam but here's the config you would have put in:

add ssl certKey spreadfirefox.com -cert  "/nsconfig/ssl/www.spreadfirefox.com.crt" -key "/nsconfig/ssl/www.spreadfirefox.com.key"

add lb vserver www_sfx-ssl SSL 63.245.209.35 443 -persistenceType NONE -lbMethod LEASTRESPONSETIME -redirectURL "http://status.mozilla.com/" -cltTimeout 30
set ssl vserver "www_sfx-ssl" -cipherRedirect DISABLED -sslv2Redirect DISABLED
bind ssl vserver "www_sfx-ssl" -certkeyName spreadfirefox.com
bind lb vserver www_sfx-ssl "svc-group-app-generic-80"