Page MenuHomePhabricator

delete and revoke SSL certificate rt.wikimedia.org
Closed, DeclinedPublic

Description

RT moved behind misc-web (I71315c476262e6) so the certificate is not needed anymore.

Event Timeline

Dzahn raised the priority of this task from to Needs Triage.
Dzahn updated the task description. (Show Details)
Dzahn added a project: acl*sre-team.
Dzahn added a subscriber: Dzahn.
Dzahn added a project: HTTPS.
Dzahn set Security to None.
Dzahn added a subscriber: RobH.

Change 216339 had a related patch set uploaded (by Dzahn):
RT: stop installing SSL cert

https://gerrit.wikimedia.org/r/216339

  • deleted on server magnesium: shred'ed key in /etc/ssl/private/ and rm'ed cert and chained file in /etc/ssl/localcerts/
  • removed install_certificate from puppet role (it also did this in labs!)
  • removed HTTPS monitoring on magnesium
  • follow-up ticket that we don't need to use a public IP anymore now

please do:

Dzahn triaged this task as Medium priority.

Change 216332 had a related patch set uploaded (by Dzahn):
delete RT's SSL certificate

https://gerrit.wikimedia.org/r/216332

Change 216332 merged by Dzahn:
delete RT's SSL certificate

https://gerrit.wikimedia.org/r/216332

So turned out we need this on its own for the email routing, rejecting the ticket now that Daniel has rolled back the changes.