Maniphest T100825

replace ganglia's sha1 cert with sha256
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	RobH
	May 29 2015, 6:48 PM

Tags

Referenced Files

	F174573: ganglia_ssl_sha1_1.png
	Jun 4 2015, 5:39 PM

	F174579: ganglia_ssl_sha2_2.png
	Jun 4 2015, 5:39 PM

	F174577: ganglia_ssl_sha2_1.png
	Jun 4 2015, 5:39 PM

	F174575: ganglia_ssl_sha1_2.png
	Jun 4 2015, 5:39 PM

Subscribers

Description

Tracking task to replace ganglia's sha1 cert with sha256, in multiple steps:

- reissue certificate in sha256
- update configuration of ganglia to use new certificate
- push changes live
- revoke old sha1 certificate

Details

	Subject	Repo	Branch	Lines +/-
	ganglia: use SSLCertificateChainFile	operations/puppet	production	+2 -0
	ganglia's sha1 cert to sha256	operations/puppet	production	+26 -28

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		RobH	T73156 Replace SHA1 certificates with SHA256
		Resolved		Dzahn	T100825 replace ganglia's sha1 cert with sha256

Event Timeline

RobH created this task.May 29 2015, 6:48 PM

RobH raised the priority of this task from to Medium.

RobH updated the task description. (Show Details)

RobH added projects: acl*sre-team, HTTPS.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 29 2015, 6:48 PM

Change 214670 had a related patch set uploaded (by RobH):
ganglia's sha1 cert to sha256

https://gerrit.wikimedia.org/r/214670

gerritbot added a project: Patch-For-Review.May 29 2015, 6:49 PM

RobH updated the task description. (Show Details)May 29 2015, 6:59 PM

RobH set Security to None.

RobH updated the task description. (Show Details)

RobH mentioned this in T73156: Replace SHA1 certificates with SHA256.May 29 2015, 7:07 PM

Change 215508 had a related patch set uploaded (by Dzahn):
ganglia: use SSLCertificateChainFile

https://gerrit.wikimedia.org/r/215508

Change 214670 merged by Dzahn:
ganglia's sha1 cert to sha256

https://gerrit.wikimedia.org/r/214670

Dzahn mentioned this in rOPUP9d84b45d48d1: ganglia's sha1 cert to sha256.Jun 4 2015, 5:03 PM

Change 215508 merged by Dzahn:
ganglia: use SSLCertificateChainFile

https://gerrit.wikimedia.org/r/215508

Dzahn mentioned this in rOPUPba200381a8ed: ganglia: use SSLCertificateChainFile.Jun 4 2015, 5:08 PM

Dzahn claimed this task.Jun 4 2015, 5:09 PM

before:

ganglia_ssl_sha1_1.png (599×899 px, 43 KB)

ganglia_ssl_sha1_2.png (606×593 px, 43 KB)

after:

ganglia_ssl_sha2_1.png (549×877 px, 41 KB)

ganglia_ssl_sha2_2.png (630×588 px, 71 KB)

Dzahn closed this task as Resolved.Jun 4 2015, 5:42 PM

Dzahn added a subscriber: Chmarkine.

Dzahn updated the task description. (Show Details)Jun 4 2015, 8:48 PM

Chmarkine mentioned this in T72326: Ganglia server doesn't send intermediary certificates.Jun 5 2015, 12:20 AM