707066 - SSL Certificate for boardwiki.mozilla.org

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Shyam Mani [:fox2mike]]

boardwiki.mozilla.org has been using the *.mozilla.org wildcard cert, which expires on 12/2. This certificate should be used in place of the wildcard.

Comment 1

[Ashish Vijayaram [:ashish]]

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 2

[Shyam Mani [:fox2mike]]

Dear Shyam Mani,

Congratulations! GeoTrust has approved your request for a Enterprise SSL certificate. Your certificate is included at the end of this email.

INSTALLATION INSTRUCTIONS

1. INSTALL CERTIFICATE:
Install the X.509 version of your certificate included at the end of this e-mail.
For installation instructions for your SSL Certificate, go to:
http://www.geotrust.com/support/installation-instructions/index.html

2. INTERMEDIATE CERTIFICATE ADVISORY:
You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly

You can also get your GeoTrust intermediate Certificates at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST

4. INSTALL THE GEOTRUST TRUE SITE SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the GeoTrust True Site Seal can be found on the following link:
https://www.geotrust.com/support/true-businessid/true-site-seal/

Visit the GeoTrust Support Web site, where you will find a range of support tools to help you:
http://www.geotrust.com/support

Best regards,

GeoTrust Customer Support
http://www.geotrust.com/support
Hours of Operation: Mon - Fri 05:00 - 17:00 (PST)
Email:     [e-mail]
Web:       http://www.geotrust.com
Phone:     [phone] or 1-678-366-8399
Live Chat: http://www.geotrust.com/support


** MICROSOFT IIS and TOMCAT USERS
Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal:
https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually.

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Shyam Mani [:fox2mike]]

fox2mike@woodpecker ~ $ curl -I -v https://boardwiki.mozilla.org/
* About to connect() to boardwiki.mozilla.org port 443 (#0)
*   Trying 63.245.209.46... connected
* Connected to boardwiki.mozilla.org (63.245.209.46) port 443 (#0)
* found 165 certificates in /etc/ssl/certs/ca-certificates.crt
* 	 server certificate verification OK
* 	 common name: boardwiki.mozilla.org (matched)
* 	 server certificate expiration date OK
* 	 server certificate activation date OK
* 	 certificate public key: RSA
* 	 certificate version: #3
* 	 subject: serialNumber=FTxavkP357tjj0QFReR2o6vOv4GQeM-U,C=US,ST=California,L=Mountain View,O=Mozilla Corporation,OU=IT,CN=boardwiki.mozilla.org
* 	 start date: Wed, 30 Nov 2011 16:59:51 GMT
* 	 expire date: Mon, 02 Dec 2013 09:48:51 GMT
* 	 issuer: C=US,O=GeoTrust\, Inc.,CN=GeoTrust SSL CA
* 	 compression: NULL
* 	 cipher: ARCFOUR-128
* 	 MAC: SHA1