RT moved behind misc-web (I71315c476262e6) so the certificate is not needed anymore.
Description
Description
Details
Details
| Project | Branch | Lines +/- | Subject | |
|---|---|---|---|---|
| operations/puppet | production | +0 -5 | RT: stop installing SSL cert | |
| operations/puppet | production | +0 -27 | delete RT's SSL certificate |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Declined | RobH | T101571 delete and revoke SSL certificate rt.wikimedia.org | |||
| Resolved | Dzahn | T101432 move RT behind misc-web |
Event Timeline
Comment Actions
Change 216339 had a related patch set uploaded (by Dzahn):
RT: stop installing SSL cert
Comment Actions
- deleted on server magnesium: shred'ed key in /etc/ssl/private/ and rm'ed cert and chained file in /etc/ssl/localcerts/
- removed install_certificate from puppet role (it also did this in labs!)
- removed HTTPS monitoring on magnesium
- follow-up ticket that we don't need to use a public IP anymore now
please do:
- revoke certificate with vendor
- delete cert from repo: https://gerrit.wikimedia.org/r/#/c/216332/
- delete key from private repo
Comment Actions
Change 216332 had a related patch set uploaded (by Dzahn):
delete RT's SSL certificate
Comment Actions
So turned out we need this on its own for the email routing, rejecting the ticket now that Daniel has rolled back the changes.