Closed Bug 758383 Opened 12 years ago Closed 12 years ago

SSL certificate for *.vcap.mozillalabs.com

Categories

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Product:
Infrastructure & Operations Graveyard
Component:
WebOps: Other
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: jsocol, Assigned: bburton)

Details

(Whiteboard: [geotrust order 8843326, waiting on verification of domain ownership]) 

The current *.mozillalabs.com certificat doesn't cover *.vcap.mozillalabs.com (or *.*.ml.c in general) so any SSL access triggers a certificate warning.

Can we get a cheap cert for *.vcap.mozillalabs.com so it's valid?
A good point, punting to Server Ops
Assignee: nobody → server-ops
Component: General → Server Operations
Product: Petri → mozilla.org
QA Contact: gozer → phong
Version: unspecified → other
Component: Server Operations → Server Operations: Web Operations
QA Contact: phong → cshields
I'm not sure there are "cheap" wildcard certs :) If this is production, this will need an ack from security assurance before we proceed.
(In reply to Shyam Mani [:fox2mike] from comment #2)
> If this is production, this
> will need an ack from security assurance before we proceed.

I don't know how to answer that question, CCing DavidA.
Whiteboard: [waiting for info]
going ahead and asking for an opsec nod on this so we can get moving.
Assignee: server-ops → bburton
Wildcard cert for *.vcap.mozillalabs.com is approved.
Copy the following Certificate Request and paste into bug to obtain a Certificate.
When you receive your certificate, you 'should' name it something like wild.vcap.mozillalabs.com.crt

-----BEGIN CERTIFICATE REQUEST-----
MIIDOTCCAiECAQAwgaAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh
MRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRwwGgYDVQQKExNNb3ppbGxhIENvcnBv
cmF0aW9uMR8wHQYDVQQDFBYqLnZjYXAubW96aWxsYWxhYnMuY29tMSUwIwYJKoZI
hvcNAQkBFhZob3N0bWFzdGVyQG1vemlsbGEuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvfKIwHiD2F01Ku5vImuvV4WyUv9Wr7+SOfqzXtPrGQw0
pZ2c/1yC30lzlaPvKZNdde2h+Rkhjkvb9mU5N7fiSLk9Adw5IoEQEJ+q2HFm+cd4
DhLvgT9xH7mufk5Qn5225PnQycbCK1ItbyL/aXcStJsAXSstOi3skrubXNJfrXgV
na/2BiiE8TzhxLLUZX01NDDsUPKWjLZHRCPqu4u2vyvccAMgri4Gksdzcj6eNguL
qB4Q6SPUEmAeAE9EcnPGnupZvMjqjVdN4YG/TIbew6I4si7+kABtL7Oh9fSb52kh
960J+JQRNfIr7OZ8D5m75wLICYSEMewYSfiVllrwEQIDAQABoFMwUQYJKoZIhvcN
AQkOMUQwQjARBglghkgBhvhCAQEEBAMCBkAwDAYDVR0TAQH/BAIwADAfBgNVHREE
GDAWghR2Y2FwLm1vemlsbGFsYWJzLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAX9Ws
J3gKt6AH0b1CbeMHWB4nrOTHUVq0yDQs+pv5dO7AELDs3gMymWIjYRsBlg+64kiI
di1UR77r+1FNUrlD10Sxo5b1tiZNBMeAKH5QgS0ml91aHIXriXqFhoO5QGcvTOaz
Smrl/+8+BBLqqJGwVs1Ee5TmYum14PskeoL0q+z+fmm1d9LAcfgnGt2gbZtq1wYY
hCoZz7EYziEBxgRS/D8eKaI9CXNlBafAVfyjuvJBaj3fTVDY+To8v2VnGysUiYaX
+cnyMjNd5O/5SuXjBH5z5YksEbpRYAyfL2DgwZjbgQ4dFeTxQ/b1USlXj+KSvR3D
Kv5QdZ7vVhRtgqipag==
-----END CERTIFICATE REQUEST-----
Status: NEW → ASSIGNED
True BusinessID Wildcard Enrollment

  	
Thank you for your True BusinessID Wildcard certificate request
 
  	Your order number is: 8843326
Whiteboard: [waiting for info] → [geotrust order 8843326, waiting on verification of domain ownership]
I checked on the status

Authentication Status
This section tracks the authentication steps that must be completed before we can issue this order. If the order or additional information was submitted recently, it may take up to one business day for the information to appear or be updated.
Authentication Step	Status	Last Updated
Proof of Organization	 In Progress	
Proof of Domain Registration	 In Progress	
Verification	 In Progress	
Certificate

I will follow up by phone tomorrow
Certificate has been issued

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
R/F, gozer will install in Labs Zeus as soon as he is able
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Deployed in labs for *.vcap.mozillalabs.com
Component: Server Operations: Web Operations → WebOps: Other
Product: mozilla.org → Infrastructure & Operations
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.