551338 - Allow https access to plugins.mozilla.org

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Austin King [:ozten]]

The new production website
http://plugins.mozilla.org/en-us
needs to be available over https.

It hosts the API http://plugins.mozilla.org/en-us/pfs/v2 which will be requests via https from https://www.mozilla.com/en-US/plugincheck/

Stage already is setup with https.
https://plugins.stage.mozilla.com/en-us/pfs/v2 works with and without https.

Thanks!

Comment 1

[Shyam Mani [:fox2mike]]

Sure, I'll set this up for you.

Comment 2

[Austin King [:ozten]]

Ping.

This is a blocker for me to push www-trunk.stage to auth.stage. Also it's critical for pushing to prod.

Comment 3

[Shyam Mani [:fox2mike]]

I'll get this done first thing Monday morning SGT, which is Sunday night PDT.

Comment 4

[Shyam Mani [:fox2mike]]

Alright, this is setup.

trinity:trunk shyam$ curl -I -v https://plugins.mozilla.org/
* About to connect() to plugins.mozilla.org port 443 (#0)
*   Trying 63.245.209.133... connected
* Connected to plugins.mozilla.org (63.245.209.133) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: /opt/local/share/curl/curl-ca-bundle.crt
  CApath: none
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-SHA
* Server certificate:
*        subject: serialNumber=vhiCn2kbHVxmzSKeR6dKZqOK/187nnD0; C=US; ST=California; L=Mountain View; O=Mozilla Corporation; OU=Secure Web Server; CN=*.mozilla.org
*        start date: 2009-12-01 03:42:54 GMT
*        expire date: 2011-12-02 10:55:27 GMT
*        common name: *.mozilla.org (matched)
*        issuer: C=US; O=Equifax; OU=Equifax Secure Certificate Authority
*        SSL certificate verify ok.
> HEAD / HTTP/1.1
> User-Agent: curl/7.19.7 (i386-apple-darwin10.2.0) libcurl/7.19.7 OpenSSL/0.9.8l zlib/1.2.3
> Host: plugins.mozilla.org
> Accept: */*

But since we have $config['site_protocol'] = 'http'; it's still using http for now, would you like me to switch that over to https?

Comment 5

[Austin King [:ozten]]

(In reply to comment #4)
No need to update site_protocol, that is a separate decision if we ever want to do that.

Thanks fox2mike!

Comment 6

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified FIXED on https://plugins.mozilla.org/en-us; site works just fine (albeit a tad slow).