547792 - drumbeat.stage.mozilla.com needs a better SSL certificate

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Reed Loden [:reed]]

The current SSL certificate on https://drumbeat.stage.mozilla.com states the following:

* Server certificate:
* 	 subject: CN=oremj-drumbeat-tmp
* 	 start date: 2010-01-27 20:42:48 GMT
* 	 expire date: 2020-01-25 20:42:48 GMT
* 	 common name: oremj-drumbeat-tmp (does not match 'drumbeat.stage.mozilla.com')
* 	 issuer: CN=oremj-drumbeat-tmp
* 	 SSL certificate verify result: self signed certificate (18)

Since drumbeat.stage.mozilla.com is not running on the normal staging servers, a self-signed SSL certificate using the MoCo CA should be generated and used instead.

Another option would be to rename the staging site to www-stage.drumbeat.org and use the DV SSL certificate that mrz bought in bug 543706.

Comment 1

[matthew zeier [:mrz]]

The right fix for this is to change the stage name to the one I was told to buy the cert for.  Your last option is the one we should do.

Comment 2

[Derek Moore [:dmoore]]

oremj, passing this to you to coordinate the name change.

Comment 3

[Gervase Markham [:gerv]]

Can we have an HTTP redirect from the old name to the new one, to avoid breaking existing links? (Mark has asked some people to start populating the staging server with content...)

Gerv

Comment 4

[Gervase Markham [:gerv]]

www-stage.drumbeat.org is now an A record pointing at the IP 67.23.45.13.

Gerv

Comment 6

[Jeremy Orem [:oremj]]

https://www-stage.drumbeat.org/ is responding with the correct cert. I assume you just need to make in-app changes to change the domain?