927041 - Procure SSL cert for source.opennews.org

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[JP Schneider :jp]

Hello!
Can we please provision a cert for source.opennews.org?
This is for a Thursday am launch, sorry for the crunch on it!

Thanks!

Comment 1

[Brandon Burton [:solarce]]

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 2

[Brandon Burton [:solarce]]

Certificate request has been submitted to Digicert, because this is for a new domain with them it has to be validated which may take up to 48 hours.

Once Digicert has completed the Organization Validation for opennews.org we'll be able to approve and issue the certificate

:jp, do you want the private key and will do the server configuration yourself?

Comment 3

[Brandon Burton [:solarce]]

Attachment: source.opennews.org_certs.zip

Certificate has been approved and issued.

Attached is a bundle with the certificate and CA intermediate certificate

Let me know on the private key and server installation

Thanks!

Comment 4

[JP Schneider :jp]

Hi Brandon,

Perhaps we can rope cyliang into encrypting and sending me the keys.  We also want to probably add this cert to the lb currently serving source.

Comment 5

[C. Liang [:cyliang]]

JP: I've mailed you an encrypted file.  Please let me know if it won't decrypt properly.

I've peeled off the part about applying a cert off onto its own bug (934704).