725207 - SSL for mozillacamp.org

Status: RESOLVED WONTFIX

(mozilla.org Graveyard :: Server Operations, task)

Description

[Pierros Papadeas [:pierros]]

Last year I registered mozillacamp.org overnight so we can have registration form for EU and Asia Mozcamps. mozillacamp.org is now in gandi under my name.

This year we need to have once again SSL for it (we did last year) for MozCamp LATAM. Gandi (and Comodo) this time are hesitant in giving it as it includes "mozilla" which is a brand name. We are under time pressure for this. 

Can we get a *.mozillacamp.org SSL asap? And then transfer the domain once we are done with it.

We need to launch the registration form by Friday. Thanks!

Comment 1

[Shyam Mani [:fox2mike]]

Hey Pierros,

1) We can't get SSL certs for a domain we don't own. So transfer has to happen first and then we can get the cert.

2) Infrasec discourages the use of wildcard certs, so we can get you an SSL cert for specific domains, not *.mozillacamp.org. Why exactly do you need a wildcard cert? (they're also way more expensive, fwiw).

Let me know how you'd like to proceed.

Comment 2

[Pierros Papadeas [:pierros]]

Hey fox2mike!

1. Understood. Can we make the transfer *today*?

2. It is just that we have 6-10 subdomains so setting things up would be *much* easier, plus it would not need additional IPs. On second thought though we can move things to mozillacamp.org/<whatever>

Comment 3

[Shyam Mani [:fox2mike]]

(In reply to Pierros Papadeas [:pierros] from comment #2)
> Hey fox2mike!
> 
> 1. Understood. Can we make the transfer *today*?

Sure, file a bug for the transfer and make it infra only, put in the transfer codes and we should be able to make that happen. It usually takes a day or two for the transfer to take place.

> 2. It is just that we have 6-10 subdomains so setting things up would be
> *much* easier, plus it would not need additional IPs. On second thought
> though we can move things to mozillacamp.org/<whatever>

Yup, that will work too.

Comment 4

[Shyam Mani [:fox2mike]]

Do we still want an SSL cert?

Comment 5

[Pierros Papadeas [:pierros]]

Sorry for not following up fox2mike.
No need for now. Thanks!