Closed Bug 707617 Opened 13 years ago Closed 13 years ago

Categories

(mozilla.org Graveyard :: Server Operations, task)

x86
macOS
task
Not set
normal

Tracking

(Not tracked)

VERIFIED FIXED

People

(Reporter: jruderman, Assigned: fox2mike)

References

()

Details

(Whiteboard: Geotrust OrderID: 8109003)

pvtbuilds.mozilla.org uses an invalid security certificate. The certificate expired on 12/2/11 2:55 AM. The current time is 12/5/11 2:00 AM. (Error code: sec_error_expired_certificate)
Jesse, My apologies. I didn't even know this site existed. I'll fix this right away.
Assignee: server-ops → shyam
Blocks: 703412
CSR : -----BEGIN CERTIFICATE REQUEST----- MIIDRjCCAi4CAQAwgawxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRwwGgYDVQQKExNNb3ppbGxhIENvcnBv cmF0aW9uMQswCQYDVQQLEwJJVDEeMBwGA1UEAxMVcHZ0YnVpbGRzLm1vemlsbGEu b3JnMSUwIwYJKoZIhvcNAQkBFhZob3N0bWFzdGVyQG1vemlsbGEuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJz6c7FvBnY3QIjGcqCRFgaLMmyB KCQK5VuI1A212Nhf1+guZ8ohYeYs1Szwlv8pNc13OAyYT6oPsr3A4ebGBeWndkma cjlzahJNemCglytJYRQcMv5aHmlSb9cQu2MBvK8n75W/x81n8pqCWaHQHSWt2nL7 XbuUmDus9uBEg1cfad1gi8JbLNPCGyUQ5veArPwfpBa2HZnRknOMjb2ZKrZMzj1t xEtotmawKuy5VfggEiXWcRyX4LNhNmJV/sHZTIaqzfjhZnGVymUyFe6JoPFsQJE2 Q10dSe717ekVxE1P+yFghgYQHoJjgvs17wAtPvlVHvThOL64Zh7A3N0gyQIDAQAB oFQwUgYJKoZIhvcNAQkOMUUwQzARBglghkgBhvhCAQEEBAMCBkAwDAYDVR0TAQH/ BAIwADAgBgNVHREEGTAXghVwdnRidWlsZHMubW96aWxsYS5vcmcwDQYJKoZIhvcN AQEFBQADggEBAKafGRIep7UQkzsdSuQ7qjU49yj/mEdVivwXJjkoI0zu7/qEFb3R 6MtIaHIersQsKDIkwV5ZpzkkYtAUoAeB/lVwcQ1dwa/fuKI/J1ywUqz/1yYIZhNq Te+zv4SXn1k+cU0ivNRliH3k1DFjzN0bdiJXmSyqiH/q2vuOqsWcBUIHw7nJEw9k x25s/ud7+An1BfhBOrmYXlbZu4JRzKDN5uX2gyrGM54XPmZG59WoNUIPxsXGjnfY zVMw6he1Qu9IeFSgNMCq+DfGKE/UyChNDanyt5R71voyCu0ZtkqYfr5QJQuO8VVp rz63jQS6J38lbVk9X7hDkRztdpu1deP49ic= -----END CERTIFICATE REQUEST-----
Dear Shyam Mani, Congratulations! GeoTrust has approved your request for a Enterprise SSL certificate. Your certificate is included at the end of this email. INSTALLATION INSTRUCTIONS 1. INSTALL CERTIFICATE: Install the X.509 version of your certificate included at the end of this e-mail. For installation instructions for your SSL Certificate, go to: http://www.geotrust.com/support/installation-instructions/index.html 2. INTERMEDIATE CERTIFICATE ADVISORY: You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly You can also get your GeoTrust intermediate Certificates at: https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423 3. CHECK INSTALLATION: Ensure you have installed your certificate correctly at: https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST 4. INSTALL THE GEOTRUST TRUE SITE SEAL: Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site. Installation instructions for the GeoTrust True Site Seal can be found on the following link: https://www.geotrust.com/support/true-businessid/true-site-seal/ Visit the GeoTrust Support Web site, where you will find a range of support tools to help you: http://www.geotrust.com/support Best regards, GeoTrust Customer Support http://www.geotrust.com/support Hours of Operation: Mon - Fri 05:00 - 17:00 (PST) Email: esslorders@geotrust.com Web: http://www.geotrust.com Phone: 1-866-436-8787 or 1-678-366-8399 Live Chat: http://www.geotrust.com/support ** MICROSOFT IIS and TOMCAT USERS Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal: https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually. Web Server CERTIFICATE ----------------- -----BEGIN CERTIFICATE----- MIIElzCCA3+gAwIBAgIDAQ7OMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTExMTIwMzIyNTUyNFoXDTEzMTIwNjA3NTAwNFowgbAxKTAnBgNVBAUT IFJtL2pLcVFxZ3BXZkRXdkhiTGdjdmYydVVRMktJWFEwMQswCQYDVQQGEwJVUzET MBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEcMBoG A1UEChMTTW96aWxsYSBDb3Jwb3JhdGlvbjELMAkGA1UECxMCSVQxHjAcBgNVBAMT FXB2dGJ1aWxkcy5tb3ppbGxhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMSc+nOxbwZ2N0CIxnKgkRYGizJsgSgkCuVbiNQNtdjYX9foLmfKIWHm LNUs8Jb/KTXNdzgMmE+qD7K9wOHmxgXlp3ZJmnI5c2oSTXpgoJcrSWEUHDL+Wh5p Um/XELtjAbyvJ++Vv8fNZ/Kaglmh0B0lrdpy+127lJg7rPbgRINXH2ndYIvCWyzT whslEOb3gKz8H6QWth2Z0ZJzjI29mSq2TM49bcRLaLZmsCrsuVX4IBIl1nEcl+Cz YTZiVf7B2UyGqs344WZxlcplMhXuiaDxbECRNkNdHUnu9e3pFcRNT/shYIYGEB6C Y4L7Ne8ALT75VR704Ti+uGYewNzdIMkCAwEAAaOCAScwggEjMB8GA1UdIwQYMBaA FEJ5VBthzVUrPmPVPEhX9Z/7Rc5KMA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwIAYDVR0RBBkwF4IVcHZ0YnVpbGRzLm1vemls bGEub3JnMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwuZ2VvdHJ1 c3QuY29tL2NybHMvZ3Rzc2wuY3JsMB0GA1UdDgQWBBTcVzJlHykw2Sqsssdtv626 tXMj2zAMBgNVHRMBAf8EAjAAMEMGCCsGAQUFBwEBBDcwNTAzBggrBgEFBQcwAoYn aHR0cDovL2d0c3NsLWFpYS5nZW90cnVzdC5jb20vZ3Rzc2wuY3J0MA0GCSqGSIb3 DQEBBQUAA4IBAQBrSpEfIF0ZjW/+LPiYT/DiMphU6Bzs1MewsqqVG7KLI3IIY6BP w2dr/ys/+Xza6yauZ/sMjh8hC6o/ifxkwMsFqc5ymhIbqFopqcIySl7pKGSHf6av qakygRd91cGut8dLbVmJrfj0DfPAVM5iq260aeYzIXzEsqXf0QpIbU2gKlo0+09E 4d3Ua3K2VnluVbyZayW2CHpuqKbB+3YAW5Zvp1JiSqQTYKDgx9oiPurEmwRYA/G4 T71klOBKgcyUQ9qGWSIGBB2cu0IMuACt8gQB5WxNjIWF++eUb7g9L6T6v1oTNekO uwZIlLqySTaOZ2u+7wAU8BK2X1PSYGN6vpH3 -----END CERTIFICATE----- INTERMEDIATE CA: --------------------------------------- -----BEGIN CERTIFICATE----- MIID2TCCAsGgAwIBAgIDAjbQMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i YWwgQ0EwHhcNMTAwMjE5MjIzOTI2WhcNMjAwMjE4MjIzOTI2WjBAMQswCQYDVQQG EwJVUzEXMBUGA1UEChMOR2VvVHJ1c3QsIEluYy4xGDAWBgNVBAMTD0dlb1RydXN0 IFNTTCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCzgMHk5Uat cGA9uuUU3Z6KXot1WubKbUGlI+g5hSZ6p1V3mkihkn46HhrxJ6ujTDnMyz1Hr4Gu FmpcN+9FQf37mpc8oEOdxt8XIdGKolbCA0mEEoE+yQpUYGa5jFTk+eb5lPHgX3UR 8im55IaisYmtph6DKWOy8FQchQt65+EuDa+kvc3nsVrXjAVaDktzKIt1XTTYdwvh dGLicTBi2LyKBeUxY0pUiWozeKdOVSQdl+8a5BLGDzAYtDRN4dgjOyFbLTAZJQ50 96QhS6CkIMlszZhWwPKoXz4mdaAN+DaIiixafWcwqQ/RmXAueOFRJq9VeiS+jDkN d53eAsMMvR8CAwEAAaOB2TCB1jAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFEJ5 VBthzVUrPmPVPEhX9Z/7Rc5KMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4 ysxOMBIGA1UdEwEB/wQIMAYBAf8CAQAwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDov L2NybC5nZW90cnVzdC5jb20vY3Jscy9ndGdsb2JhbC5jcmwwNAYIKwYBBQUHAQEE KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nZW90cnVzdC5jb20wDQYJKoZI hvcNAQEFBQADggEBANTvU4ToGr2hiwTAqfVfoRB4RV2yV2pOJMtlTjGXkZrUJPji J2ZwMZzBYlQG55cdOprApClICq8kx6jEmlTBfEx4TCtoLF0XplR4TEbigMMfOHES 0tdT41SFULgCy+5jOvhWiU1Vuy7AyBh3hjELC3DwfjWDpCoTZFZnNF0WX3OsewYk 2k9QbSqr0E1TQcKOu3EDSSmGGM8hQkx0YlEVxW+o78Qn5Rsz3VqI138S0adhJR/V 4NwdzxoQ2KDLX4z6DOW/cf/lXUQdpj6HR/oaToODEj+IZpWYeZqF6wJHzSXj8gYE TpnKXKBuervdo5AaRTPvvz7SBMS24CqFZUE+ENQ= -----END CERTIFICATE-----
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Whiteboard: Geotrust OrderID: 8109003
And installed. fox2mike@woodpecker ~ $ curl -I -v https://pvtbuilds.mozilla.org/ * About to connect() to pvtbuilds.mozilla.org port 443 (#0) * Trying 63.245.208.160... connected * Connected to pvtbuilds.mozilla.org (63.245.208.160) port 443 (#0) * found 165 certificates in /etc/ssl/certs/ca-certificates.crt * server certificate verification OK * common name: pvtbuilds.mozilla.org (matched) * server certificate expiration date OK * server certificate activation date OK * certificate public key: RSA * certificate version: #3 * subject: serialNumber=Rm/jKqQqgpWfDWvHbLgcvf2uUQ2KIXQ0,C=US,ST=California,L=Mountain View,O=Mozilla Corporation,OU=IT,CN=pvtbuilds.mozilla.org * start date: Sat, 03 Dec 2011 22:55:24 GMT * expire date: Fri, 06 Dec 2013 07:50:04 GMT * issuer: C=US,O=GeoTrust\, Inc.,CN=GeoTrust SSL CA * compression: NULL * cipher: AES-128-CBC * MAC: SHA1 Apologies for this, we got 49 other sites on time (mostly ;) )
Status: RESOLVED → VERIFIED
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.