Created attachment 707258 [details] the error Hello can we get support.mozilla.org whildcard so we can use https://www.support.mozlla.org without any problems
I am pretty sure what we want is to redirect from https://www.support.mozilla.org to https://support.mozilla.org just like we do for http.
that might be better
:satdav - just a heads up, we do not issue wildcard certificates per our security policies. what :r1cky mentions above is probably the best (and most cost effective) option. *if* www.support.mozilla.org is going to be hosting content, we can look into issuing a san (subject alternative name) certificate for this domain. this is only an option if we're _not_ just configuring www.support.mozilla.org to be a redirect.
Assignee: server-ops → server-ops-webops
Component: Server Operations → Server Operations: Web Operations
QA Contact: shyam → nmaul
www.support.mozilla.org won't be hosting content. interesting, http://www.support.mozilla.org redirects to https://support.mozilla.org. Using https://www.s.m.o, however, gives the SSL certificate problem.
:mythmon/:satdav - we do not support https for redirect only URLs. it's just not cost effective considering how much a signed digital certificates cost per year.
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → WONTFIX
Summary: SSL Whildcard support.mozilla.org → SSL Wildcard support.mozilla.org
We've moved www.support.mozilla.org to point at our static cluster where we host redirects and to use our non-ssl vip bburton@voltaire [05:09:19] [~] -> % host www.support.mozilla.org www.support.mozilla.org is an alias for static-non-ssl.zlb.phx.mozilla.net. static-non-ssl.zlb.phx.mozilla.net has address 18.104.22.168 static-non-ssl.zlb.phx.mozilla.net has IPv6 address 2620:101:8008:5::2:8 Confirmed this is working as expected now and users will not get a certificate error, it just won't work bburton@voltaire [05:09:10] [~] -> % curl http://www.support.mozilla.org <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://support.mozilla.org/">here</a>.</p> </body></html> bburton@voltaire [05:09:05] [~] -> % curl -v https://www.support.mozilla.org * About to connect() to www.support.mozilla.org port 443 (#0) * Trying 22.214.171.124... Connection refused * Trying 2620:101:8008:5::2:8... Failed to connect to 2620:101:8008:5::2:8: No route to host * Undefined error: 0 * couldn't connect to host * Closing connection #0 curl: (7) Failed to connect to 2620:101:8008:5::2:8: No route to host
Assignee: server-ops-webops → bburton
Priority: -- → P3
Resolution: WONTFIX → FIXED
Summary: SSL Wildcard support.mozilla.org → Remove HTTPS from www.support.mozilla.org
Component: Server Operations: Web Operations → WebOps: Other
Product: mozilla.org → Infrastructure & Operations
You need to log in before you can comment on or make changes to this bug.