Remove HTTPS from www.support.mozilla.org

RESOLVED FIXED

Status

P3
normal
RESOLVED FIXED
6 years ago
5 years ago

People

(Reporter: david.weir, Assigned: bburton)

Tracking

Details

(URL)

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
Created attachment 707258 [details]
the error

Hello can we get support.mozilla.org whildcard so we can use https://www.support.mozlla.org without any problems
(Reporter)

Updated

6 years ago
OS: Windows 7 → All
Hardware: x86_64 → All
I am pretty sure what we want is to redirect from https://www.support.mozilla.org to https://support.mozilla.org just like we do for http.
(Reporter)

Comment 2

6 years ago
that might be better
:satdav - just a heads up, we do not issue wildcard certificates per our security policies. what :r1cky mentions above is probably the best (and most cost effective) option. 

*if* www.support.mozilla.org is going to be hosting content, we can look into issuing a san (subject alternative name) certificate for this domain. this is only an option if we're _not_ just configuring www.support.mozilla.org to be a redirect.
Assignee: server-ops → server-ops-webops
Component: Server Operations → Server Operations: Web Operations
QA Contact: shyam → nmaul
www.support.mozilla.org won't be hosting content.

interesting, http://www.support.mozilla.org redirects to https://support.mozilla.org. Using https://www.s.m.o, however, gives the SSL certificate problem.
:mythmon/:satdav - we do not support https for redirect only URLs. it's just not cost effective considering how much a signed digital certificates cost per year.
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → WONTFIX
Summary: SSL Whildcard support.mozilla.org → SSL Wildcard support.mozilla.org
(Assignee)

Comment 6

6 years ago
We've moved www.support.mozilla.org to point at our static cluster where we host redirects and to use our non-ssl vip

bburton@voltaire [05:09:19] [~] 
-> % host www.support.mozilla.org
www.support.mozilla.org is an alias for static-non-ssl.zlb.phx.mozilla.net.
static-non-ssl.zlb.phx.mozilla.net has address 63.245.217.181
static-non-ssl.zlb.phx.mozilla.net has IPv6 address 2620:101:8008:5::2:8

Confirmed this is working as expected now and users will not get a certificate error, it just won't work

bburton@voltaire [05:09:10] [~] 
-> % curl http://www.support.mozilla.org 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://support.mozilla.org/">here</a>.</p>
</body></html>

bburton@voltaire [05:09:05] [~] 
-> % curl -v https://www.support.mozilla.org
* About to connect() to www.support.mozilla.org port 443 (#0)
*   Trying 63.245.217.181... Connection refused
*   Trying 2620:101:8008:5::2:8... Failed to connect to 2620:101:8008:5::2:8: No route to host
* Undefined error: 0
* couldn't connect to host
* Closing connection #0
curl: (7) Failed to connect to 2620:101:8008:5::2:8: No route to host
Assignee: server-ops-webops → bburton
Priority: -- → P3
Resolution: WONTFIX → FIXED
Summary: SSL Wildcard support.mozilla.org → Remove HTTPS from www.support.mozilla.org
Component: Server Operations: Web Operations → WebOps: Other
Product: mozilla.org → Infrastructure & Operations
You need to log in before you can comment on or make changes to this bug.