Maniphest T207476

Create production LE accounts
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Krenair
	Oct 19 2018, 3:05 PM

Description

Right now the certcentral prod config has a staging LE account, it should have a prod one.

Details

	Subject	Repo	Branch	Lines +/-
	certcentral: Switch to LE ACMEv2 production environment	operations/puppet	production	+6 -6
	secret: add dummy LE ACMEv2 private keys for certcentral[12]001	labs/private	master	+6 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Invalid	None	T108946 [Epic] Improve the development infrastructure
Declined	None	T99531 [Task] move wikiba.se webhosting to wikimedia cluster
Resolved	• MasinAlDujailiWMDE	T155359 wikiba.se should use HTTPS
Resolved	• ema	T108827 Investigate TCP Fast Open for tlsproxy
Declined	None	T107236 Switch port 80 to nginx on primary clusters
Resolved	Vgutierrez	T207050 Migrate most standard public TLS certificates to CertCentral issuance
Resolved	None	T199711 Deploy a scalable service for ACME (LetsEncrypt) certificate management
Open	None	T101048 Policy decisions for new (and current) DNS domains registered to the WMF
Resolved	BBlack	T104681 HTTPS Plans (tracking / high-level info)
Resolved	Vgutierrez	T214253 en.wikipedia.com [sic] serves an invalid certificate
Resolved	Vgutierrez	T190244 en-wp.org certificate error
Resolved	Vgutierrez	T133548 Create a secure redirect service for large count of non-canonical / junk domains
Resolved	Krenair	T194962 Create and deploy a centralized letsencrypt service
Resolved	Vgutierrez	T207476 Create production LE accounts

Event Timeline

Krenair triaged this task as Medium priority.Oct 19 2018, 3:05 PM

Krenair created this task.

• ema moved this task from Backlog to TLS on the Traffic board.Oct 22 2018, 8:28 AM

Krenair mentioned this in T206461: Provide a Let's Encrypt ACME v2 staging environment account.Nov 5 2018, 3:21 PM

As per T208212 two Lets Encrypt production accounts are going to be created

Krenair renamed this task from Create production LE account to Create production LE accounts.Nov 5 2018, 3:45 PM

Change 471751 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001

https://gerrit.wikimedia.org/r/471751

gerritbot added a project: Patch-For-Review.Nov 5 2018, 3:47 PM

Change 471753 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: Switch to LE ACMEv2 production environment

https://gerrit.wikimedia.org/r/471753

Change 471751 merged by Vgutierrez:
[labs/private@master] secret: add dummy LE ACMEv2 private keys for certcentral[12]001

https://gerrit.wikimedia.org/r/471751

Change 471753 merged by Vgutierrez:
[operations/puppet@production] certcentral: Switch to LE ACMEv2 production environment

https://gerrit.wikimedia.org/r/471753

<vgutierrez> so certcentral is running now against the LE ACMEv2 production environment, no ratelimits hitted, no internal services hammered, pinkunicorn.wm.o certificates happily issued \o/

Aklapper removed a subscriber: GerritBot.May 16 2023, 10:18 AM

Create production LE accountsClosed, ResolvedPublicActions

Description

Details

Related ObjectsSearch...

Event Timeline

Create production LE accounts
Closed, ResolvedPublic
Actions

Related Objects
Search...