Page MenuHomePhabricator
Create Task
Maniphest T110511

sitemap.wikimedia.org uses invalid SSL certificate
Closed, ResolvedPublic
Actions

Description

Similar to the two domains (download.wiki[mp]edia.org) in T107575, https://sitemap.wikimedia.org/ also uses the cert of dumps.wikimedia.org, since sitemap is a CNAME to dumps.

So sitemap.wikimedia.org needs to point to text-lb and set it to redirect to https://dumps.wikimedia.org/.

Details

SubjectRepoBranchLines +/-
Point sitemap.wikimedia.org to text-lb.operations/dnsmaster+1 -1
Rewrite sitemap.wikimedia.org to dumps.wikimedia.orgoperations/puppetproduction+7 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

Chmarkine created this task.Aug 27 2015, 11:54 AM
Chmarkine claimed this task.
Chmarkine raised the priority of this task from to Needs Triage.
Chmarkine updated the task description. (Show Details)
Chmarkine added a project: HTTPS.
Chmarkine subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 27 2015, 11:54 AM
gerritbot subscribed.Aug 27 2015, 12:55 PM

Change 234256 had a related patch set uploaded (by Chmarkine):
Rewrite sitemap.wikimedia.org to dumps.wikimedia.org

https://gerrit.wikimedia.org/r/234256

gerritbot added a project: Patch-For-Review.Aug 27 2015, 12:55 PM

Change 234257 had a related patch set uploaded (by Chmarkine):
Point sitemap.wikimedia.org to text-lb.

https://gerrit.wikimedia.org/r/234257

Chmarkine added a project: acl*sre-team.Aug 27 2015, 12:57 PM
Chmarkine set Security to None.
Restricted Application added a subscriber: Matanya. · View Herald TranscriptAug 27 2015, 12:57 PM
Chmarkine added a parent task: T102824: Clean up DNS/redirects for TLS.Aug 27 2015, 1:01 PM
Chmarkine added subscribers: • MZMcBride, ArielGlenn, Dzahn and 2 others.

I copied the CC list of T107575 to this one.

Dzahn added a comment.Aug 27 2015, 2:22 PM

Also see T101486. Question is what sitemap.wm.org is even here for or if we should simply remove it. Unless we'd actually do T23765 and use it for that.

• demon subscribed.Sep 1 2015, 7:08 PM

I'd just decom it for now. Can always resurrect if T23765 or something else finds a use for it.

gerritbot added a comment.Sep 1 2015, 9:42 PM

Change 234256 merged by Dzahn:
Rewrite sitemap.wikimedia.org to dumps.wikimedia.org

https://gerrit.wikimedia.org/r/234256

Dzahn mentioned this in rOPUP1d215b8be4d0: Rewrite sitemap.wikimedia.org to dumps.wikimedia.org.Sep 1 2015, 9:43 PM
gerritbot added a comment.Sep 2 2015, 2:42 PM

Change 234257 merged by BBlack:
Point sitemap.wikimedia.org to text-lb.

https://gerrit.wikimedia.org/r/234257

Dzahn mentioned this in rODNS75a8f3a59a4f: Point sitemap.wikimedia.org to text-lb..Sep 2 2015, 2:44 PM
Dzahn added a comment.Sep 2 2015, 2:46 PM

Since Apache and DNS change are merged, this should solve the issue for now since sitemap can use the wildcard cert.

Dzahn closed this task as Resolved.Sep 2 2015, 2:48 PM
Dzahn added a comment.Sep 2 2015, 2:53 PM

https://www.ssllabs.com/ssltest/analyze.html?d=sitemap.wikimedia.org&s=208.80.154.224

BBlack mentioned this in T104735: (www.)wmfusercontent.org should respond to HTTP.Sep 14 2015, 9:04 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL