List of steps to reproduce (step by step, including full links if applicable):
What happens?:
The certificate for upload.wikimedia.beta.wmflabs.org expired on February 16, 2022.
What should have happened instead?:
200
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | bd808 | T273956 acme-chief sometimes doesn't refresh certificates because it ignores SIGHUP | |||
| Resolved | Vgutierrez | T293585 [epic] The SSL certificate for Beta cluster domains fails to properly renew & deploy | |||
| Resolved | BUG REPORT | MatthewVernon | T301995 The certificate for upload.wikimedia.beta.wmflabs.org expired on February 16, 2022. |
Event Timeline
Comment Actions
Mentioned in SAL (#wikimedia-releng) [2022-02-17T15:58:19Z] <zabe> root@deployment-cache-upload06:~# touch /srv/trafficserver/tls/etc/ssl_multicert.config && systemctl reload trafficserver-tls.service # T301995
Comment Actions
Since there seems to be a valid certificate, I did the same mitigation as in T271808 and T293070.
root@deployment-cache-upload06:/etc/acmecerts/unified/live# openssl x509 -dates -noout -in rsa-2048.crt notBefore=Jan 20 06:46:47 2022 GMT notAfter=Apr 20 06:46:46 2022 GMT root@deployment-cache-upload06:/etc/acmecerts/unified/live#
Comment Actions
[I think this task can be closed, since the issue was resolved, and we have T293585 to track the problem of it not happening automatically]