If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Remove graphite.mozilla.org from phx1?

RESOLVED FIXED

Status

Infrastructure & Operations
WebOps: SSL and Domain Names
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: jd, Assigned: cturra)

Tracking

Details

(Whiteboard: [IT - SSL])

(Reporter)

Description

4 years ago
The SSL cert for graphite.mozilla.org in phx1 is about to expire but I noticed the DNS resolves to scl3 now. This bug is to either remove the configs from the phx1 ZLBs or reissue if it is still nbecessary. I will add to triage list for this week.

:)
(Reporter)

Comment 1

4 years ago
CC folks who may know
Flags: needinfo?(rbryce)
Flags: needinfo?(eziegenhorn)

Updated

4 years ago
Whiteboard: [IT - SSL]
:rbryce knows about this.
Flags: needinfo?(eziegenhorn)

Comment 3

4 years ago
(In reply to Jason Crowe [:jd] from comment #0)
> The SSL cert for graphite.mozilla.org in phx1 is about to expire but I
> noticed the DNS resolves to scl3 now. This bug is to either remove the
> configs from the phx1 ZLBs or reissue if it is still nbecessary. I will add
> to triage list for this week.
> 
> :)

JD, I will be changing graphite in phx1 to use the SAN certificate that is in SCL3.  I am hoping to be finished Thursday 12-5
Flags: needinfo?(rbryce)
(Assignee)

Comment 4

4 years ago
looks like the work :rbryce mentioned above is complete.

  $ openssl x509 -text -in graphite_mozilla_org -noout
  ...
    X509v3 Subject Alternative Name:
      DNS:graphite.mozilla.org, DNS:graphite-phx.mozilla.org, DNS:graphite-scl.mozilla.org
  ...
Assignee: server-ops-webops → cturra
Status: NEW → RESOLVED
Last Resolved: 4 years ago
OS: Linux → All
Hardware: x86_64 → All
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.