By providing acme-chief support in compile_redirects() we can keep redirects.dat as the source of truth for both web server configuration and list of SNIs for issuance of TLS certificates.
Description
Description
Details
Details
Related Changes in Gerrit:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • ema | T108827 Investigate TCP Fast Open for tlsproxy | |||
| Declined | None | T107236 Switch port 80 to nginx on primary clusters | |||
| Open | None | T101048 Policy decisions for new (and current) DNS domains registered to the WMF | |||
| Resolved | BBlack | T104681 HTTPS Plans (tracking / high-level info) | |||
| Resolved | Vgutierrez | T214253 en.wikipedia.com [sic] serves an invalid certificate | |||
| Resolved | Vgutierrez | T190244 en-wp.org certificate error | |||
| Resolved | Vgutierrez | T133548 Create a secure redirect service for large count of non-canonical / junk domains | |||
| Open | None | T225096 Provide acme-chief/TLS SNI list support in compile_redirects() |
Event Timeline
Comment Actions
Change 514477 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] redirects.dat: Provide acme-chief/TLS SNI list support in compile_redirects()
Comment Actions
The swap of Traffic for Traffic-Icebox in this ticket's set of tags was based on a bulk action for all such tickets that haven't been updated in 6 months or more. This does not imply any human judgement about the validity or importance of the task, and is simply the first step in a larger task cleanup effort. Further manual triage and/or requests for updates will happen this month for all such tickets. For more detail, have a look at the extended explanation on the main page of Traffic-Icebox . Thank you!
Comment Actions
@Vgutierrez: Removing task assignee as this open task has been assigned for more than two years - see the email sent to all task assignees on 2024-04-15.
Please assign this task to yourself again if you still realistically [plan to] work on this task - it would be welcome! :)
If this task has been resolved in the meantime, or should not be worked on by anybody ("declined"), please update its task status via "Add Action… 🡒 Change Status".
Also see https://www.mediawiki.org/wiki/Bug_management/Assignee_cleanup for tips how to best manage your individual work in Phabricator. Thanks!