Page MenuHomePhabricator
Create Task
Maniphest T218685

acme-chief creates absolute symlinks for "live" and relative for "new" on certificate renewal
Closed, ResolvedPublic
Actions

Description

On certificate renewal the live symlink gets created as an absolute symlink instead of being a relative one:

root@acmechief1001:/var/lib/acme-chief/certs/librenms# ls -alh
total 20K
drwxr-xr-x  4 acme-chief acme-chief 4.0K Mar 19 15:02 .
drwxr-x--- 16 acme-chief acme-chief 4.0K Mar 18 09:43 ..
drwxr-x---  2 acme-chief acme-chief 4.0K Mar 18 09:01 49bf94a47bd44c0782470cc81a2f0762
drwxr-x---  2 acme-chief acme-chief 4.0K Mar 19 15:02 6beb218837f8413d9c5c228691bd9fd8
lrwxrwxrwx  1 acme-chief acme-chief   67 Mar 19 15:02 live -> /var/lib/acme-chief/certs/librenms/6beb218837f8413d9c5c228691bd9fd8
lrwxrwxrwx  1 acme-chief acme-chief   32 Mar 19 15:02 new -> 6beb218837f8413d9c5c228691bd9fd8

Details

SubjectRepoBranchLines +/-
debian: Add release 0.13 to changelogoperations/software/acme-chiefdebian+8 -0
Release 0.13operations/software/acme-chiefdebian+2 -2
acme-chief: Use relative symlinks for the live oneoperations/software/acme-chiefdebian+10 -1
Release 0.13operations/software/acme-chiefmaster+2 -2
acme-chief: Use relative symlinks for the live oneoperations/software/acme-chiefmaster+10 -1
Customize query in gerrit

Related Objects

Event Timeline

Vgutierrez triaged this task as Medium priority.Mar 19 2019, 3:07 PM
Vgutierrez created this task.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 19 2019, 3:07 PM
gerritbot subscribed.Mar 19 2019, 3:09 PM

Change 497504 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@master] acme-chief: Use relative symlinks for the live one

https://gerrit.wikimedia.org/r/497504

gerritbot added a project: Patch-For-Review.Mar 19 2019, 3:09 PM
gerritbot added a comment.Mar 19 2019, 3:32 PM

Change 497521 had a related patch set uploaded (by Alex Monk; owner: Vgutierrez):
[operations/software/acme-chief@debian] acme-chief: Use relative symlinks for the live one

https://gerrit.wikimedia.org/r/497521

gerritbot added a comment.Mar 19 2019, 3:33 PM

Change 497504 merged by jenkins-bot:
[operations/software/acme-chief@master] acme-chief: Use relative symlinks for the live one

https://gerrit.wikimedia.org/r/497504

gerritbot added a comment.Mar 19 2019, 3:33 PM

Change 497444 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/software/acme-chief@master] Release 0.13

https://gerrit.wikimedia.org/r/497444

gerritbot added a comment.Mar 19 2019, 3:46 PM

Change 497444 merged by Vgutierrez:
[operations/software/acme-chief@master] Release 0.13

https://gerrit.wikimedia.org/r/497444

gerritbot added a comment.Mar 19 2019, 3:50 PM

Change 497527 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/software/acme-chief@debian] Release 0.13

https://gerrit.wikimedia.org/r/497527

gerritbot added a comment.Mar 19 2019, 3:51 PM

Change 497521 merged by jenkins-bot:
[operations/software/acme-chief@debian] acme-chief: Use relative symlinks for the live one

https://gerrit.wikimedia.org/r/497521

gerritbot added a comment.Mar 19 2019, 3:54 PM

Change 497527 merged by jenkins-bot:
[operations/software/acme-chief@debian] Release 0.13

https://gerrit.wikimedia.org/r/497527

gerritbot added a comment.Mar 19 2019, 3:57 PM

Change 497532 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/software/acme-chief@debian] debian: Add release 0.13 to changelog

https://gerrit.wikimedia.org/r/497532

gerritbot added a comment.Mar 19 2019, 4:05 PM

Change 497532 merged by jenkins-bot:
[operations/software/acme-chief@debian] debian: Add release 0.13 to changelog

https://gerrit.wikimedia.org/r/497532

Stashbot subscribed.Mar 19 2019, 4:45 PM

Mentioned in SAL (#wikimedia-operations) [2019-03-19T16:45:15Z] <vgutierrez> uploaded acme-chief 0.14 to apt.wikimedia.org (buster) - T218685 T218418 T207295

Stashbot mentioned this in T218418: CN + SNI list on config file doesn't match issued certificate on some scenarios.Mar 19 2019, 4:45 PM
Stashbot mentioned this in T207295: Expose not-yet-live certs to clients so they can handle OCSP stapling.
Vgutierrez closed this task as Resolved.Mar 19 2019, 4:45 PM
Vgutierrez removed a project: Patch-For-Review.
Krenair mentioned this in rOSACf5dd87217e5f: acme-chief: Use relative symlinks for the live one.Mar 21 2019, 12:29 AM
Krenair mentioned this in rOSAC4d64bfb16dc3: Release 0.13.
Krenair mentioned this in rOSAC1910c0e957ef: debian: Add release 0.13 to changelog.
Vgutierrez mentioned this in rOSACf459baf9b232: acme-chief: Use relative symlinks for the live one.Mar 21 2019, 12:29 AM
Vgutierrez mentioned this in rOSAC509944d54d3c: Release 0.13.
Krenair mentioned this in rOSAC29b55967fe2c: Release 0.13.Mar 21 2019, 12:29 AM
Krenair mentioned this in rOSACa6aeca087dfb: Release 0.13.
Krenair mentioned this in rOSACe3c3b624d384: acme-chief: Use relative symlinks for the live one.
Vgutierrez mentioned this in rOSACbc22aa97cd60: acme-chief: Use relative symlinks for the live one.Mar 21 2019, 12:29 AM
Vgutierrez mentioned this in rOSAC2782da09d98e: acme-chief: Use relative symlinks for the live one.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits