convert dumps to use Letsencrypt for SSL cert (deadline: 2017-04-26)
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Dzahn
	Jan 9 2017, 8:54 PM

Description

This subtask of T133717 is for converting dumps.wikimedia.org to use Letsencrypt for the SSL cert.

The current commercial cert expires on April 26th.

Note that dumps uses nginx, not Apache.

Details

Subject	Repo	Branch	Lines +/-
delete dumps.wikimedia.org SSL cert	operations/puppet	production	+0 -31
dumps: skip Letsencrypt cert creation on ms1001	operations/puppet	production	+1 -0
dumps: fix nginx config for acme-challenge	operations/puppet	production	+3 -5
dumps: switch cert/key to Letsencrypt, final step	operations/puppet	production	+2 -2
dumps: LE, remove download.wm.org from subject list	operations/puppet	production	+1 -1
dumps: switch to Letsencrypt for TLS cert	operations/puppet	production	+15 -3

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		None	T133717 Letsencrypt all the prod things we can - planning
		Resolved		Dzahn	T154940 convert dumps to use Letsencrypt for SSL cert (deadline: 2017-04-26)

Event Timeline

Dzahn created this task.Jan 9 2017, 8:54 PM

Restricted Application removed a project: Patch-For-Review. · View Herald TranscriptJan 9 2017, 8:54 PM

• ema moved this task from Backlog to TLS on the Traffic board.Jan 16 2017, 6:48 PM

The first monthly dumps run is complete. Do the conversion in the next couple days and you are golden!

Dzahn claimed this task.Jan 17 2017, 6:18 AM

Change 332543 had a related patch set uploaded (by Dzahn):
dumps: switch to Letsencrypt for TLS cert

https://gerrit.wikimedia.org/r/332543

gerritbot added a project: Patch-For-Review.Jan 17 2017, 7:40 PM

Change 332543 merged by Dzahn:
dumps: switch to Letsencrypt for TLS cert

https://gerrit.wikimedia.org/r/332543

Change 333058 had a related patch set uploaded (by Dzahn):
dumps: LE, remove download.wm.org from subject list

https://gerrit.wikimedia.org/r/333058

Change 333058 merged by Dzahn:
dumps: LE, remove download.wm.org from subject list

https://gerrit.wikimedia.org/r/333058

Change 333060 had a related patch set uploaded (by Dzahn):
dumps: switch cert/key to Letsencrypt, final step

https://gerrit.wikimedia.org/r/333060

Change 333060 merged by Dzahn:
dumps: switch cert/key to Letsencrypt, final step

https://gerrit.wikimedia.org/r/333060

Change 333103 had a related patch set uploaded (by Dzahn):
dumps: fix nginx config for acme-challenge

https://gerrit.wikimedia.org/r/333103

Change 333103 merged by Dzahn:
dumps: fix nginx config for acme-challenge

https://gerrit.wikimedia.org/r/333103

Change 333117 had a related patch set uploaded (by Dzahn):
dumps: skip Letsencrypt cert creation on ms1001

https://gerrit.wikimedia.org/r/333117

Change 333117 merged by Dzahn:
dumps: skip Letsencrypt cert creation on ms1001

https://gerrit.wikimedia.org/r/333117

Screenshot from 2017-01-19 13-30-58.png (421×583 px, 48 KB)

Change 333833 had a related patch set uploaded (by Dzahn):
delete dumps.wikimedia.org SSL cert

https://gerrit.wikimedia.org/r/333833

Change 333833 merged by Dzahn:
delete dumps.wikimedia.org SSL cert