@RobH the rt.wikimedia.org cert is not needed anymore. RT used Letsencrypt for a short time and now it moved behind misc-web.
I already deleted cert and key from the repos, but i remember you said to check to revoke with the vendor and for your paper trail.
If not needed it was just fyi that we dont need to renew this anymore and we can close this.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Dzahn | T123525 reduce amount of remaining Ubuntu 12.04 (precise) systems in production | |||
| Resolved | • Cmjohnson | T137006 decom magnesium (data center) | |||
| Resolved | Dzahn | T123713 decom magnesium (was: Reinstall magnesium with jessie) | |||
| Resolved | Dzahn | T119112 move RT off of magnesium | |||
| Declined | RobH | T136979 revoke rt.wikimedia.org cert |
We don't revoke certs unless we know they are compromised. Since they are only for a year, adding them to revocation lists has larger repercussions and updates than simply letting it expire.
(This is my understanding, as explained by @BBlack.)