Page MenuHomePhabricator
Create Task
Maniphest T181053

Finish migration to LE certificates
Closed, ResolvedPublic
Actions

Description

The certificate used to load https://translatewiki.net/ uses an SSL certificate that will be distrusted in Chrome 66. Once distrusted, users will be prevented from loading this resource. See https://g.co/chrome/symantecpkicerts for more information.

We have LE certs already (on all other domains), but we should puppetize the setup properly.

Details

SubjectRepoBranchLines +/-
Puppetize certbottranslatewikimaster+36 -79
Customize query in gerrit

Event Timeline

Nikerabbit created this task.Nov 21 2017, 2:17 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 21 2017, 2:17 PM
Nikerabbit moved this task from Backlog to System admin stuff on the translatewiki.net board.Nov 21 2017, 2:21 PM
gerritbot subscribed.Dec 17 2017, 7:02 PM

Change 398703 had a related patch set uploaded (by Nikerabbit; owner: Nikerabbit):
[translatewiki@master] Puppetize certbot

https://gerrit.wikimedia.org/r/398703

gerritbot added a project: Patch-For-Review.Dec 17 2017, 7:02 PM
gerritbot added a comment.Dec 20 2017, 3:41 PM

Change 398703 merged by jenkins-bot:
[translatewiki@master] Puppetize certbot

https://gerrit.wikimedia.org/r/398703

Nikerabbit claimed this task.Dec 21 2017, 10:46 AM
Nikerabbit removed a project: Patch-For-Review.
Nikerabbit added a subscriber: siebrand.

Had follow-up in https://gerrit.wikimedia.org/r/399571

Will close when I don't get error from cron :)

Nikerabbit closed this task as Resolved.Jan 2 2018, 9:44 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL