this can be taken live/made publicly visible immediately.
changed from beta.browserid.org to diresworb.org to keep beta code off a subdomain of production.
confidential because ticket contains a domain name not yet registered. kinda paranoid, whatever.
So, this is live, but not resolving from everywhere it should. Moving over to netops to sort out why this is the case. Resolves from the internet, not from 10.2.10.5. My changes were svn r18223, but the slave config scripts didn't do anything, so I think that's missing.
From where I sit it resolves fine: [lth@lloydpro browserid]$ dig diresworb.org | egrep ^diresworb diresworb.org. 300 IN A 184.108.40.206 but the load balancer doesn't seem to want to talk to me. [lth@lloydpro browserid]$ curl https://220.127.116.11 curl: (7) couldn't connect to host FWIW, lloyd
bump. Hi! Any chance we could get a little love for this bug? It's making some people that I would prefer to be happy, sad. Thank you, and sorry to nag, lloyd
The first problem is a DNS misconfiguration/bug that is now fixed. For the second, my curl says everything is good, from both my work computer and and my personal server. Could you please check again, maybe also with a wget --no-check-certificate https://diresworb.org/ a traceroute to that IP and/or a telnet 18.104.22.168 443 for example. Thanks!
This is what I see: $ curl https://22.214.171.124 curl: (51) SSL: certificate subject name '*.diresworb.org' does not match target host name '126.96.36.199' From my Mac w/ and w/o VPN-MPT This $ wget --no-check-certificate https://diresworb.org/ gets me this (still using VPN MPT): --2011-08-05 16:16:04-- https://diresworb.org/ Resolving diresworb.org... 188.8.131.52 Connecting to diresworb.org|184.108.40.206|:443... connected. WARNING: certificate common name `*.diresworb.org' doesn't match requested host name `diresworb.org'. HTTP request sent, awaiting response... 200 OK Length: 1991 (1.9K) [text/html] Saving to: `index.html' 100%[==================================================================================================>] 1,991 --.-K/s in 0s 2011-08-05 16:16:04 (22.7 MB/s) - `index.html' saved [1991/1991]
(In reply to James Bonacci [:jbonacci] from comment #8) > WARNING: certificate common name `*.diresworb.org' doesn't match requested > host name `diresworb.org'. True, but unimportant. diresworb.org is in the SubjAltName of the cert. Why wget doesn't look at this is beyond me.
Is there still something wrong here, or can I close the bug?
As far as I can tell, everything is working as it should. I can access Beta from within Mozilla and outside Mozilla. Please close.
per comment 11