940548 - New cert for wild.allizom.org

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Jason Crowe [:jd]]

Need a new digicert for wild.allizom.org expires 11 dec 2013

Comment 1

[Jason Crowe [:jd]]

Also needs to be installed in HCI, but probably every ZLB cluster.

Comment 2

[Jason Crowe [:jd]]

and zlb[2-4].ops.scl3
and zlb[1-3-5-6].ops.scl3

:)

Comment 3

[Chris Turra [:cturra]]

ssl certificate reissued through digicert. will start applying, but my guess is this cert is everywhere! will do my best to find everything.

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 4

[Chris Turra [:cturra]]

i have changed all the ssl catalogs across all the zeus load balancers. i'm sure there will be one off services that manually imported this cert, but we'll need to address those on a case-by-case basis.

the signed public certificate and private key can be found on ssl1.private.phx1