The cert for l10n-stage-sj.mozilla.org is expiring but I dont think we need to renew it. It is only used as the default cert for the VIP: https://zlb1.ops.scl3.mozilla.com:9090/apps/zxtm/?name=l10n-dashboard-ssl§ion=Virtual%20Servers%3AEdit%3ASSL%20Decryption but there is another cert installed on the VIP that likely covers this usage. Someone needs to investigate any SAN or use that might require a renewal of this cert prior to DEC 01. We can probably just assign the other l10n cert to the default and remove this one without renewal.
since this has been expired without consequence for over a month, i have moved forward with the suggestion :jd made above. the default ssl certificate for l10n-dashboard ssl is now l10n.mozilla.org and i have removed the l10n-stage-sj.mozilla.org cert from the ssl catalog. marking as r/fixed.
Assignee: server-ops-webops → cturra
Status: NEW → RESOLVED
Last Resolved: 4 years ago
OS: Linux → All
Hardware: x86_64 → All
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.