910932 - Certificate request wildcard: *.stage.mozaws.net

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Benson Wong [:mostlygeek]]

Hi, 

In Svc. Ops we have a new domain for various staging systems in Amazon Web services, stage.mozaws.net. Some of these services require SSL with ELB termination.

Please create an SSL wildcard certificate for *.stage.mozaws.net.

This is my public key to encrypt the certificate with: 

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.13 (Darwin)
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=6kbY
-----END PGP PUBLIC KEY BLOCK-----

+++ This bug was initially created as a clone of Bug #842696 +++

Comment 1

[Jake Maul [:jakem]]

This is a staging site wildcard, similar to allizom.org. As such, a wildcard is allowed.

This is currently registered to "WhoisGuard, Inc" in WHOIS info... according to :mostlygeek, we suspect this is really registered by Mark Mayo. In either case, we won't be able to issue certs on it until the owner (WhoisGuard, by proxy for the real owner) approves a request.

I've added this domain to our Digicert account, which is a good start, and should generate a request to WhoisGuard to let us issue certs. We're still waiting on an agreement signing to be able to use this, but we're hopeful that could be done very soon.


For completeness... we believe this will be tested on (among other things) Firefox for Android, so using the Mozilla CA is probably not in the cards.

Comment 2

[Chris Turra [:cturra]]

below are the signed public and digicert intermediate ssl certificates. :mostlygeek - i will send you the private key offline.

wildcard_stage_mozaws_net.crt
===

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


DigiCertCA.crt
===

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Benson Wong [:mostlygeek]]

:cturra

Thanks for verifying my key. This is the right one, just outputted from my gpg. 

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.13 (Darwin)

mQENBFGNcs0BCADeiwxZqaQ7B1vvtj/Hje6RG0OA6DDzVspJKCsdmWgrZnayMg8L
x91d+JoKsBYKaQLUeShVLk92ErzaBNUAQWxaSbhkV5VYkHv1AJe5WY4UutgFXhwE
h0eBKzLlgM1yMw6wWWGek0jXlEZmf4VFyiB6jULQWoiBD2IHbei9jeBbZYbXm4r9
40iAJfq1Xs2b/rKd0R0OqKujiWzumpWEK0faCRe7SXoyqoqVOybqblmX8F6scSeG
iMSLVSCbDVRsaj11vobO47afcCfGQ2062fZ6EgCA8tHl7npPeJhzrWgZUfKZKrHu
ciMQv84S0hCS6rVyd33qRpovyWU6PwW/yicxABEBAAG0KUJlbnNvbiBXb25nIChN
b3ppbGxhKSA8YndvbmdAbW96aWxsYS5jb20+iQE4BBMBAgAiBQJRjXLNAhsDBgsJ
CAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRAFzbyry3EWoNJ2B/9f5OxdicEBB1R+
9ORZQ9P2svGGwxEIgy/ekdaqx9/2YGKQuEBHP7WFIju1NeSINqW+aW3A0IID9ek/
4nsrlQyqeVVa23AqizQwM9NsDXnmaNSYgIPioe2PP0wf6Af2kBJpTCc2wQsOoHSR
BkP4dR79iUf16aqIO9JAuhi69WiULGK0WjtdqMb+M8s32FnaI8Ok/kpqbqrf0Ffw
DZKGHIueBSltiTHWARaAt2tvlS/TbOZIsQ3dI58mV4FN5584EAc1pR9gplGGB4RT
avUhynbMQpCN1VkOcWUXKOCr8V8VWtXYwkZacrm5qz0T2Vo7wbhnzWCHbD3uXat8
e648Kw4giQEcBBABAgAGBQJRjXaeAAoJEEcAD3uxRB3vxMsH/irweESHsY1RviRI
m9j4Qy98AZDtK+WZdoMaP29VVvKH3b0JvtSxkBOoHF3s3FOz+CVBIjCcnMfCzt1V
gfJ96jgXFU5agkAjZ3UAmUoHxlsOh0k3BPb2Q4MeISPnGUwXZ8mX6SHTka0FyMAX
TlkPaofX1s5XCMg9mhx2BTiqAEN1YX4QyXcasreZcXxwXHf+SyAVr++aDfCzmzRW
PrmY9GCkxwdLcUuEgEqvZbGM5TuPxUQ+2vhzkzFgtKaIof6zMvUbVd8O6fcXukL3
MQArhgMkegLKj0k13KC/tQIu2QzLW5yiCBOojolFH7o0j8WZZdcdsHw4DoJve5ZT
oUO50raJARwEEAECAAYFAlGRTK8ACgkQcuB7JyWAGY5PuQgAviXBPKV0QxPnCQ/l
LIT6mufCOnIEZKLTaS4wV0E+of/9Lal8RZmhfSNhSbCWpoW9HcJPjSakJoB/7fQi
cbCrgeTa0WMD7Ty1d/DWIMgQJOzAnBrwEGWdmsHbMinAfpdGIDlCmxm59JsKpOKr
u7OnD/eJbFLmJuemCx26MDJ8JSh146XJNiBqrcdygcnyHjAOqtyG/x54ULTuI3px
yzYtMFusjm+e4ro+yuY/+/yU132/Y4Msq0kZgK99CxQIO5A/Xb8AgGjH5IGxVqN8
lj2xx5/ufUCIy75d5KBwYbDVnJyiIq4MRjHwlfIDeOg7drPKlhdajmJygUEIQxEf
+Z6No7kBDQRRjXLNAQgA8PApE1soKcdkVCCC1NNuh2NywBkp5Os88NsyCvolp4PK
ROKkLyBdLrdVIPe+npNA7tkyHu4bgXNkb+JjW6Nk3oY/z7K7ccY6gtYPHhzAx099
sBjsH2M8jPbBRl40BqqHTHUlbYibzvMK7e1WZg1MGzwjaR/rz8mJ1GpMNFLqgdnj
VK3z4dhoLtH8MtuPLO7SEd4jMcfwi8lhbGlaYDBeCQLoDAanGD3q0+qiOlqLlXgD
GngPJbYh+CLMaeem1zcxPQB09XBNQImJmpX2D8Uf7526SSj0IC0vgRRdiIjppmR/
8m0+H0TtPHyRqniCR4jJs0ExExAw3b0lCmqG42naxQARAQABiQEfBBgBAgAJBQJR
jXLNAhsMAAoJEAXNvKvLcRagL4IH/0OSrS+vFtKYETVDDZwazMIz9CzGJQVyyfZr
gjK9AoCPFx4Iwif1WfwwtR3V/lxvvr7ZSGeWYkC3rKLOLGl/ukJLnAPgbHx/81O6
u8UYdT6lbgpNTH8MmOcKF8kWQZTKwgMyBqENAWB/yh22f6MVVkMbDVJqtB19/qPT
AWb0raMngEKn14obM14DtXtiPr2JFxAPK+aQxa0VE2GLMwns4sAGzhqseU+G0iiO
taWDydF7AEPGlmh/Gzrm6lxdkAdABi3JBhmM8HCGcsqwp7TBiDNIeu8OrB47l1Fi
UHWwkwSgRa0fl6+/OjDJ4c4Y2Bb+te+cLB6jfpahk4UtN7LsZdQ=
=Su5Y
-----END PGP PUBLIC KEY BLOCK-----

Comment 4

[Chris Turra [:cturra]]

i had the common name completely wrong. wildcard instead of *. below is a reissued certificate with the CORRECT common name. new key will be sent your way privately.

star_stage_mozaws_net.crt
===

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----