Page MenuHomePhabricator
Create Task
Maniphest T107575

download.wiki[mp]edia.org are using an invalid certificate
Closed, ResolvedPublic
Actions

Description

https://download.wikipedia.org/ and https://download.wikimedia.org/ are using the certificate of dumps.wikimedia.org, which doesn't match download.wikipedia.org or download.wikimedia.org.

Details

SubjectRepoBranchLines +/-
dumps: remove nginx for download.wikimedia.orgoperations/puppetproduction+0 -10
Point download.wiki(m|p)edia.org at text-lboperations/dnsmaster+2 -2
Rewrite download.wiki(p|m)edia.org urls to dumps.wikimedia.orgoperations/puppetproduction+12 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

Chmarkine created this task.Jul 31 2015, 1:41 PM
Chmarkine raised the priority of this task from to Needs Triage.
Chmarkine updated the task description. (Show Details)
Chmarkine added a project: HTTPS.
Chmarkine added subscribers: Chmarkine, BBlack, faidon.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 31 2015, 1:41 PM
Chmarkine updated the task description. (Show Details)Jul 31 2015, 1:51 PM
Chmarkine added a project: acl*sre-team.
Chmarkine set Security to None.
Restricted Application added a subscriber: Matanya. · View Herald TranscriptJul 31 2015, 1:51 PM
BBlack added a comment.Jul 31 2015, 1:58 PM

dumps and download both sound like they should be moved to misc-web, IMHO.

Chmarkine added a parent task: T102824: Clean up DNS/redirects for TLS.Jul 31 2015, 2:33 PM
Dzahn subscribed.EditedAug 3 2015, 2:05 PM

It was never done because there were concerns by @ArielGlenn about putting large (huge, GBs) files behind varnish.

Dzahn added a subscriber: ArielGlenn.Aug 3 2015, 2:06 PM
Dzahn added a comment.Aug 4 2015, 2:04 AM

so either misc-web or the cert for dumps should be renewed and get an additional SAN of download.wm

Dzahn assigned this task to ArielGlenn.Aug 4 2015, 2:05 AM

@ArielGlenn Wanna talk to Brandon about the concerns re: huge file sizes and varnish? Or rather to Robh about getting a new cert?

Chmarkine added a comment.Aug 15 2015, 3:53 PM

How about mapping download.Wikipedia.org to the text cluster, and then have it redirect to https://dumps.wikimedia.org?

BBlack added a comment.Aug 17 2015, 8:50 PM

That seems like a reasonable approach to me.

Chmarkine renamed this task from download.wikipedia.org is using an invalid certificate to download.wiki[mp]edia.org are using an invalid certificate.Aug 25 2015, 3:21 AM
Chmarkine updated the task description. (Show Details)
gerritbot subscribed.Aug 25 2015, 3:39 AM

Change 233659 had a related patch set uploaded (by Chad):
Point download.wiki(m|p)edia.org at text-lb

https://gerrit.wikimedia.org/r/233659

gerritbot added a project: Patch-For-Review.Aug 25 2015, 3:39 AM
• MZMcBride subscribed.Aug 25 2015, 3:53 AM
gerritbot added a comment.Aug 25 2015, 4:36 PM

Change 233658 merged by Giuseppe Lavagetto:
Rewrite download.wiki(p|m)edia.org urls to dumps.wikimedia.org

https://gerrit.wikimedia.org/r/233658

yuvipanda mentioned this in rOPUPfb0554734e0d: Rewrite download.wiki(p|m)edia.org urls to dumps.wikimedia.org.Aug 25 2015, 4:36 PM
gerritbot added a comment.Aug 25 2015, 5:10 PM

Change 233659 merged by Yuvipanda:
Point download.wiki(m|p)edia.org at text-lb

https://gerrit.wikimedia.org/r/233659

yuvipanda mentioned this in rODNS11af0e9c3f41: Point download.wiki(m|p)edia.org at text-lb.Aug 25 2015, 5:11 PM
Chmarkine closed this task as Resolved.Aug 26 2015, 12:12 AM

Confirmed that this issue was fixed.

Chmarkine mentioned this in T110511: sitemap.wikimedia.org uses invalid SSL certificate.Aug 27 2015, 11:54 AM
Dzahn mentioned this in T112190: download.wikimedia.org is slow from Telecom Italia.Sep 10 2015, 11:50 PM
BBlack mentioned this in T104735: (www.)wmfusercontent.org should respond to HTTP.Sep 14 2015, 9:04 PM
gerritbot added a comment.Jan 20 2017, 4:36 PM

Change 333272 had a related patch set uploaded (by Dzahn):
dumps: remove nginx for download.wikimedia.org

https://gerrit.wikimedia.org/r/333272

Restricted Application added a project: Traffic. · View Herald TranscriptJan 20 2017, 4:36 PM
gerritbot added a comment.Jan 20 2017, 5:45 PM

Change 333272 merged by Dzahn:
dumps: remove nginx for download.wikimedia.org

https://gerrit.wikimedia.org/r/333272

ArielGlenn mentioned this in T306550: Move dumps.wikimedia.org HTTP service behind CDN edge.Apr 20 2022, 4:09 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL