Page MenuHomePhabricator
Create Task
Maniphest T202564

https://sv.wikipedia.beta.wmflabs.org/ has invalid certificate
Closed, ResolvedPublic
Actions

Description

https://sv.wikipedia.beta.wmflabs.org/ has invalid SSL certificate. I get a browser warning when navigating there.

Related Objects
Search...

Event Timeline

matmarex created this task.Aug 22 2018, 5:52 PM
Restricted Application added a project: Traffic. · View Herald TranscriptAug 22 2018, 5:52 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
matmarex added a parent task: T191184: Swedish beta cluster wiki is busted (Parsoid/RESTBase not set up?).Aug 22 2018, 5:52 PM
matmarex added a subscriber: Arlolra.
In T191184#4523999, @Arlolra wrote:

Host: sv.wikipedia.beta.wmflabs.org. is not in the cert

ssh deployment-parsoid09.deployment-prep.eqiad.wmflabs

> curl localhost:8000/sv.wikipedia.beta.wmflabs.org/v3/page/html/Huvudsida
error: Config Request failure for "https://sv.wikipedia.beta.wmflabs.org/w/api.php": Error: Hostname/IP doesn't match certificate's altnames: "Host: sv.wikipedia.beta.wmflabs.org. is not in the cert's altnames: DNS:aa.m.wikipedia.beta.wmflabs.org, DNS:aa.wikipedia.beta.wmflabs.org, DNS:aa.zero.wikipedia.beta.wmflabs.org, DNS:ar.m.wikipedia.beta.wmflabs.org, DNS:ar.wikipedia.beta.wmflabs.org, DNS:ar.zero.wikipedia.beta.wmflabs.org, DNS:beta.wmflabs.org, DNS:ca.m.wikipedia.beta.wmflabs.org, DNS:ca.wikipedia.beta.wmflabs.org, DNS:ca.zero.wikipedia.beta.wmflabs.org, DNS:commons.m.wikimedia.beta.wmflabs.org, DNS:commons.wikimedia.beta.wmflabs.org, DNS:commons.wikipedia.beta.wmflabs.org, DNS:crh.m.wikipedia.beta.wmflabs.org, DNS:crh.wikipedia.beta.wmflabs.org, DNS:de.m.wikipedia.beta.wmflabs.org, DNS:de.m.wiktionary.beta.wmflabs.org, DNS:de.wikipedia.beta.wmflabs.org, DNS:de.wiktionary.beta.wmflabs.org, DNS:de.zero.wikipedia.beta.wmflabs.org, DNS:deployment.m.wikimedia.beta.wmflabs.org, DNS:deployment.wikimedia.beta.wmflabs.org, DNS:en-rtl.m.wikipedia.beta.wmflabs.org, DNS:en-rtl.wikipedia.beta.wmflabs.org, DNS:en-rtl.zero.wikipedia.beta.wmflabs.org, DNS:en.m.wikibooks.beta.wmflabs.org, DNS:en.m.wikinews.beta.wmflabs.org, DNS:en.m.wikipedia.beta.wmflabs.org, DNS:en.m.wikiquote.beta.wmflabs.org, DNS:en.m.wikisource.beta.wmflabs.org, DNS:en.m.wikiversity.beta.wmflabs.org, DNS:en.m.wikivoyage.beta.wmflabs.org, DNS:en.m.wiktionary.beta.wmflabs.org, DNS:en.wikibooks.beta.wmflabs.org, DNS:en.wikinews.beta.wmflabs.org, DNS:en.wikipedia.beta.wmflabs.org, DNS:en.wikiquote.beta.wmflabs.org, DNS:en.wikisource.beta.wmflabs.org, DNS:en.wikiversity.beta.wmflabs.org, DNS:en.wikivoyage.beta.wmflabs.org, DNS:en.wiktionary.beta.wmflabs.org, DNS:en.zero.wikipedia.beta.wmflabs.org, DNS:eo.m.wikipedia.beta.wmflabs.org, DNS:eo.wikipedia.beta.wmflabs.org, DNS:eo.zero.wikipedia.beta.wmflabs.org, DNS:es.m.wikipedia.beta.wmflabs.org, DNS:es.wikipedia.beta.wmflabs.org, DNS:es.zero.wikipedia.beta.wmflabs.org, DNS:fa.m.wikipedia.beta.wmflabs.org, DNS:fa.wikipedia.beta.wmflabs.org, DNS:fa.zero.wikipedia.beta.wmflabs.org, DNS:fr.wikipedia.beta.wmflabs.org, DNS:he.m.wikipedia.beta.wmflabs.org, DNS:he.m.wiktionary.beta.wmflabs.org, DNS:he.wikipedia.beta.wmflabs.org, DNS:he.wiktionary.beta.wmflabs.org, DNS:he.zero.wikipedia.beta.wmflabs.org, DNS:hi.m.wikipedia.beta.wmflabs.org, DNS:hi.wikipedia.beta.wmflabs.org, DNS:hi.zero.wikipedia.beta.wmflabs.org, DNS:ja.m.wikipedia.beta.wmflabs.org, DNS:ja.wikipedia.beta.wmflabs.org, DNS:ja.zero.wikipedia.beta.wmflabs.org, DNS:ko.m.wikipedia.beta.wmflabs.org, DNS:ko.wikipedia.beta.wmflabs.org, DNS:ko.zero.wikipedia.beta.wmflabs.org, DNS:login.m.wikimedia.beta.wmflabs.org, DNS:login.wikimedia.beta.wmflabs.org, DNS:m.wikidata.beta.wmflabs.org, DNS:meta.m.wikimedia.beta.wmflabs.org, DNS:meta.wikimedia.beta.wmflabs.org, DNS:nl.m.wikipedia.beta.wmflabs.org, DNS:nl.wikipedia.beta.wmflabs.org, DNS:nl.zero.wikipedia.beta.wmflabs.org, DNS:ru.m.wikipedia.beta.wmflabs.org, DNS:ru.wikipedia.beta.wmflabs.org, DNS:ru.zero.wikipedia.beta.wmflabs.org, DNS:simple.m.wikipedia.beta.wmflabs.org, DNS:simple.wikipedia.beta.wmflabs.org, DNS:simple.zero.wikipedia.beta.wmflabs.org, DNS:sq.m.wikipedia.beta.wmflabs.org, DNS:sq.wikipedia.beta.wmflabs.org, DNS:sq.zero.wikipedia.beta.wmflabs.org, DNS:sr.m.wikipedia.beta.wmflabs.org, DNS:sr.wikipedia.beta.wmflabs.org, DNS:test.m.wikimedia.beta.wmflabs.org, DNS:test.wikimedia.beta.wmflabs.org, DNS:uk.m.wikipedia.beta.wmflabs.org, DNS:uk.wikipedia.beta.wmflabs.org, DNS:uk.zero.wikipedia.beta.wmflabs.org, DNS:wikidata.beta.wmflabs.org, DNS:www.wikibooks.beta.wmflabs.org, DNS:www.wikimedia.beta.wmflabs.org, DNS:www.wikipedia.beta.wmflabs.org, DNS:www.wiktionary.beta.wmflabs.org, DNS:zero.m.wikimedia.beta.wmflabs.org, DNS:zero.wikimedia.beta.wmflabs.org, DNS:zh.m.wikipedia.beta.wmflabs.org, DNS:zh.wikipedia.beta.wmflabs.org, DNS:zh.zero.wikipedia.beta.wmflabs.org" path: /sv.wikipedia.beta.wmflabs.org/v3/page/html/Huvudsida
Error: Config Request failure for "https://sv.wikipedia.beta.wmflabs.org/w/api.php": Error: Hostname/IP doesn't match certificate's altnames: "Host: sv.wikipedia.beta.wmflabs.org. is not in the cert's altnames: DNS:aa.m.wikipedia.beta.wmflabs.org, DNS:aa.wikipedia.beta.wmflabs.org, DNS:aa.zero.wikipedia.beta.wmflabs.org, DNS:ar.m.wikipedia.beta.wmflabs.org, DNS:ar.wikipedia.beta.wmflabs.org, DNS:ar.zero.wikipedia.beta.wmflabs.org, DNS:beta.wmflabs.org, DNS:ca.m.wikipedia.beta.wmflabs.org, DNS:ca.wikipedia.beta.wmflabs.org, DNS:ca.zero.wikipedia.beta.wmflabs.org, DNS:commons.m.wikimedia.beta.wmflabs.org, DNS:commons.wikimedia.beta.wmflabs.org, DNS:commons.wikipedia.beta.wmflabs.org, DNS:crh.m.wikipedia.beta.wmflabs.org, DNS:crh.wikipedia.beta.wmflabs.org, DNS:de.m.wikipedia.beta.wmflabs.org, DNS:de.m.wiktionary.beta.wmflabs.org, DNS:de.wikipedia.beta.wmflabs.org, DNS:de.wiktionary.beta.wmflabs.org, DNS:de.zero.wikipedia.beta.wmflabs.org, DNS:deployment.m.wikimedia.beta.wmflabs.org, DNS:deployment.wikimedia.beta.wmflabs.org, DNS:en-rtl.m.wikipedia.beta.wmflabs.org, DNS:en-rtl.wikipedia.beta.wmflabs.org, DNS:en-rtl.zero.wikipedia.beta.wmflabs.org, DNS:en.m.wikibooks.beta.wmflabs.org, DNS:en.m.wikinews.beta.wmflabs.org, DNS:en.m.wikipedia.beta.wmflabs.org, DNS:en.m.wikiquote.beta.wmflabs.org, DNS:en.m.wikisource.beta.wmflabs.org, DNS:en.m.wikiversity.beta.wmflabs.org, DNS:en.m.wikivoyage.beta.wmflabs.org, DNS:en.m.wiktionary.beta.wmflabs.org, DNS:en.wikibooks.beta.wmflabs.org, DNS:en.wikinews.beta.wmflabs.org, DNS:en.wikipedia.beta.wmflabs.org, DNS:en.wikiquote.beta.wmflabs.org, DNS:en.wikisource.beta.wmflabs.org, DNS:en.wikiversity.beta.wmflabs.org, DNS:en.wikivoyage.beta.wmflabs.org, DNS:en.wiktionary.beta.wmflabs.org, DNS:en.zero.wikipedia.beta.wmflabs.org, DNS:eo.m.wikipedia.beta.wmflabs.org, DNS:eo.wikipedia.beta.wmflabs.org, DNS:eo.zero.wikipedia.beta.wmflabs.org, DNS:es.m.wikipedia.beta.wmflabs.org, DNS:es.wikipedia.beta.wmflabs.org, DNS:es.zero.wikipedia.beta.wmflabs.org, DNS:fa.m.wikipedia.beta.wmflabs.org, DNS:fa.wikipedia.beta.wmflabs.org, DNS:fa.zero.wikipedia.beta.wmflabs.org, DNS:fr.wikipedia.beta.wmflabs.org, DNS:he.m.wikipedia.beta.wmflabs.org, DNS:he.m.wiktionary.beta.wmflabs.org, DNS:he.wikipedia.beta.wmflabs.org, DNS:he.wiktionary.beta.wmflabs.org, DNS:he.zero.wikipedia.beta.wmflabs.org, DNS:hi.m.wikipedia.beta.wmflabs.org, DNS:hi.wikipedia.beta.wmflabs.org, DNS:hi.zero.wikipedia.beta.wmflabs.org, DNS:ja.m.wikipedia.beta.wmflabs.org, DNS:ja.wikipedia.beta.wmflabs.org, DNS:ja.zero.wikipedia.beta.wmflabs.org, DNS:ko.m.wikipedia.beta.wmflabs.org, DNS:ko.wikipedia.beta.wmflabs.org, DNS:ko.zero.wikipedia.beta.wmflabs.org, DNS:login.m.wikimedia.beta.wmflabs.org, DNS:login.wikimedia.beta.wmflabs.org, DNS:m.wikidata.beta.wmflabs.org, DNS:meta.m.wikimedia.beta.wmflabs.org, DNS:meta.wikimedia.beta.wmflabs.org, DNS:nl.m.wikipedia.beta.wmflabs.org, DNS:nl.wikipedia.beta.wmflabs.org, DNS:nl.zero.wikipedia.beta.wmflabs.org, DNS:ru.m.wikipedia.beta.wmflabs.org, DNS:ru.wikipedia.beta.wmflabs.org, DNS:ru.zero.wikipedia.beta.wmflabs.org, DNS:simple.m.wikipedia.beta.wmflabs.org, DNS:simple.wikipedia.beta.wmflabs.org, DNS:simple.zero.wikipedia.beta.wmflabs.org, DNS:sq.m.wikipedia.beta.wmflabs.org, DNS:sq.wikipedia.beta.wmflabs.org, DNS:sq.zero.wikipedia.beta.wmflabs.org, DNS:sr.m.wikipedia.beta.wmflabs.org, DNS:sr.wikipedia.beta.wmflabs.org, DNS:test.m.wikimedia.beta.wmflabs.org, DNS:test.wikimedia.beta.wmflabs.org, DNS:uk.m.wikipedia.beta.wmflabs.org, DNS:uk.wikipedia.beta.wmflabs.org, DNS:uk.zero.wikipedia.beta.wmflabs.org, DNS:wikidata.beta.wmflabs.org, DNS:www.wikibooks.beta.wmflabs.org, DNS:www.wikimedia.beta.wmflabs.org, DNS:www.wikipedia.beta.wmflabs.org, DNS:www.wiktionary.beta.wmflabs.org, DNS:zero.m.wikimedia.beta.wmflabs.org, DNS:zero.wikimedia.beta.wmflabs.org, DNS:zh.m.wikipedia.beta.wmflabs.org, DNS:zh.wikipedia.beta.wmflabs.org, DNS:zh.zero.wikipedia.beta.wmflabs.org"
    at ConfigRequest.ApiRequest._requestCB (/srv/deployment/parsoid/deploy-cache/revs/44aa5e8dfa562f57dde0ee80ab860eea966ce1b0/src/lib/mw/ApiRequest.js:387:15)
    at self.callback (/srv/deployment/parsoid/deploy-cache/revs/44aa5e8dfa562f57dde0ee80ab860eea966ce1b0/node_modules/request/request.js:185:22)
    at emitOne (events.js:96:13)
    at Request.emit (events.js:188:7)
    at Request.onRequestError (/srv/deployment/parsoid/deploy-cache/revs/44aa5e8dfa562f57dde0ee80ab860eea966ce1b0/node_modules/request/request.js:877:8)
    at emitOne (events.js:101:20)
    at ClientRequest.emit (events.js:188:7)
    at TLSSocket.socketErrorListener (_http_client.js:309:9)
    at emitOne (events.js:96:13)
    at TLSSocket.emit (events.js:188:7)
    at emitErrorNT (net.js:1277:8)
    at _combinedTickCallback (internal/process/next_tick.js:80:11)
    at process._tickCallback (internal/process/next_tick.js:104:9)
Restricted Application added a project: SRE. · View Herald TranscriptAug 22 2018, 5:52 PM
Krenair subscribed.Aug 22 2018, 5:55 PM

Pretty much the same thing as T199387: Beta eswikibooks certificate issues

matmarex mentioned this in T191184: Swedish beta cluster wiki is busted (Parsoid/RESTBase not set up?).Aug 22 2018, 7:15 PM
• ema triaged this task as Medium priority.Aug 24 2018, 11:00 AM
• ema moved this task from Backlog to TLS on the Traffic board.Sep 5 2018, 8:05 AM
• Phabricator_maintenance moved this task from Backlog to Acknowledged on the SRE board.Jan 26 2019, 10:17 PM
Reedy mentioned this in T215071: Merge Wikipedia subdomains into one, to discourage censorship.Feb 11 2019, 7:39 AM
Krenair added a comment.Mar 20 2019, 10:57 PM

works now with some puppet cherry-picks

Kizule closed this task as Resolved.Mar 24 2019, 12:49 PM
Krenair reopened this task as Open.EditedMar 24 2019, 2:12 PM
Krenair added a subscriber: Kizule.

@Zoranzoki21: they're just cherry-picks... specifically https://gerrit.wikimedia.org/r/#/c/497670/ and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/497929/
This should be left open until they get merged
edit: oh and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/497430/

Reedy closed this task as Resolved.May 19 2019, 10:13 AM
Reedy claimed this task.
Reedy subscribed.
In T202564#5051923, @Krenair wrote:

@Zoranzoki21: they're just cherry-picks... specifically https://gerrit.wikimedia.org/r/#/c/497670/ and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/497929/
This should be left open until they get merged
edit: oh and https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/497430/

All are merged

Krenair claimed this task.May 19 2019, 3:46 PM

yes

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits