SSL cert for l10n-stage-sj.mozilla.org expires Dec 01

RESOLVED FIXED

Status

Infrastructure & Operations
WebOps: SSL and Domain Names
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: jd, Assigned: cturra)

Tracking

Details

(Whiteboard: [IT - SSL])

(Reporter)

Description

5 years ago
The cert for l10n-stage-sj.mozilla.org is expiring but I dont think we need to renew it. It is only used as the default cert for the VIP:

https://zlb1.ops.scl3.mozilla.com:9090/apps/zxtm/?name=l10n-dashboard-ssl&section=Virtual%20Servers%3AEdit%3ASSL%20Decryption

but there is another cert installed on the VIP that likely covers this usage.

Someone needs to investigate any SAN or use that might require a renewal of this cert prior to DEC 01.

We can probably just assign the other l10n cert to the default and remove this one without renewal.

Updated

5 years ago
Whiteboard: [IT - SSL]
(Assignee)

Comment 1

4 years ago
since this has been expired without consequence for over a month, i have moved forward with the suggestion :jd made above.

the default ssl certificate for l10n-dashboard ssl is now l10n.mozilla.org and i have removed the l10n-stage-sj.mozilla.org cert from the ssl catalog. 

marking as r/fixed.
Assignee: server-ops-webops → cturra
Status: NEW → RESOLVED
Last Resolved: 4 years ago
OS: Linux → All
Hardware: x86_64 → All
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.