Maniphest T109740

ocsp updater: re-enable automatic updates
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	BBlack
	Aug 20 2015, 5:15 PM

Project Tags

Referenced Files

None

Subscribers

Description

Currently, automatic updates of the OCSP Stapling file are disabled, with a manual global hack in place that needs regular tending. Re-enable once basic issues are confirmed fixed and/or GlobalSign seems to have stabilized their outputs.

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	Revert "disable ocsp updater cron for now"	BBlack	operations/puppet	production	+0 -1

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		BBlack	T109740 ocsp updater: re-enable automatic updates
		Resolved		BBlack	T109738 ocsp updater: validate the signature expiry lifetime
		Resolved		BBlack	T109737 ocsp updater: handle openssl "trylater" and similar more-gracefully

Event Timeline

BBlack created this task.Aug 20 2015, 5:15 PM

BBlack claimed this task.

BBlack raised the priority of this task from to Unbreak Now!.

BBlack updated the task description. (Show Details)

BBlack added projects: Traffic, acl*sre-team.

BBlack subscribed.

Restricted Application added subscribers: Matanya, • Aklapper. · View Herald TranscriptAug 20 2015, 5:15 PM

BBlack added subtasks: T109738: ocsp updater: validate the signature expiry lifetime, T109737: ocsp updater: handle openssl "trylater" and similar more-gracefully.Aug 20 2015, 5:15 PM

greg added a project: Incident-20150820-OCSP.Aug 20 2015, 5:48 PM

greg set Security to None.

Change 232874 had a related patch set uploaded (by BBlack):
Revert "disable ocsp updater cron for now"

https://gerrit.wikimedia.org/r/232874

gerritbot added a project: Patch-For-Review.Aug 21 2015, 12:20 AM

Change 232874 merged by BBlack:
Revert "disable ocsp updater cron for now"

https://gerrit.wikimedia.org/r/232874

BBlack mentioned this in rOPUPc56abc32da51: Revert "disable ocsp updater cron for now".Aug 21 2015, 12:32 AM

BBlack closed this task as Resolved.Aug 21 2015, 12:32 AM

BBlack closed subtask T109737: ocsp updater: handle openssl "trylater" and similar more-gracefully as Resolved.

BBlack closed subtask T109738: ocsp updater: validate the signature expiry lifetime as Resolved.

BBlack moved this task from Backlog to Done on the Traffic board.Aug 27 2015, 2:41 AM