Closed Bug 835529 Opened 11 years ago Closed 11 years ago

Remove HTTPS from www.support.mozilla.org

Categories

(Infrastructure & Operations Graveyard :: WebOps: Other, task, P3)

Product:
Infrastructure & Operations Graveyard
Component:
WebOps: Other
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: david.weir, Assigned: bburton)

References

(
URL
)

Details

Attachments

(1 file)

the error
83.60 KB, image/jpeg
Details
Attached image the error — 
Hello can we get support.mozilla.org whildcard so we can use https://www.support.mozlla.org without any problems
OS: Windows 7 → All
Hardware: x86_64 → All
I am pretty sure what we want is to redirect from https://www.support.mozilla.org to https://support.mozilla.org just like we do for http.
that might be better
:satdav - just a heads up, we do not issue wildcard certificates per our security policies. what :r1cky mentions above is probably the best (and most cost effective) option. 

*if* www.support.mozilla.org is going to be hosting content, we can look into issuing a san (subject alternative name) certificate for this domain. this is only an option if we're _not_ just configuring www.support.mozilla.org to be a redirect.
Assignee: server-ops → server-ops-webops
Component: Server Operations → Server Operations: Web Operations
QA Contact: shyam → nmaul
www.support.mozilla.org won't be hosting content.

interesting, http://www.support.mozilla.org redirects to https://support.mozilla.org. Using https://www.s.m.o, however, gives the SSL certificate problem.
:mythmon/:satdav - we do not support https for redirect only URLs. it's just not cost effective considering how much a signed digital certificates cost per year.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WONTFIX
Summary: SSL Whildcard support.mozilla.org → SSL Wildcard support.mozilla.org
We've moved www.support.mozilla.org to point at our static cluster where we host redirects and to use our non-ssl vip

bburton@voltaire [05:09:19] [~] 
-> % host www.support.mozilla.org
www.support.mozilla.org is an alias for static-non-ssl.zlb.phx.mozilla.net.
static-non-ssl.zlb.phx.mozilla.net has address 63.245.217.181
static-non-ssl.zlb.phx.mozilla.net has IPv6 address 2620:101:8008:5::2:8

Confirmed this is working as expected now and users will not get a certificate error, it just won't work

bburton@voltaire [05:09:10] [~] 
-> % curl http://www.support.mozilla.org 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://support.mozilla.org/">here</a>.</p>
</body></html>

bburton@voltaire [05:09:05] [~] 
-> % curl -v https://www.support.mozilla.org
* About to connect() to www.support.mozilla.org port 443 (#0)
*   Trying 63.245.217.181... Connection refused
*   Trying 2620:101:8008:5::2:8... Failed to connect to 2620:101:8008:5::2:8: No route to host
* Undefined error: 0
* couldn't connect to host
* Closing connection #0
curl: (7) Failed to connect to 2620:101:8008:5::2:8: No route to host
Assignee: server-ops-webops → bburton
Priority: -- → P3
Resolution: WONTFIX → FIXED
Summary: SSL Wildcard support.mozilla.org → Remove HTTPS from www.support.mozilla.org
Component: Server Operations: Web Operations → WebOps: Other
Product: mozilla.org → Infrastructure & Operations
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: