Page MenuHomePhabricator

Configure HTTPS for pywikibot.org
Closed, ResolvedPublic

Description

pywikibot.org is owned by WMNL (@siebrand) and redirects to our site at https://pywikibot.toolforge.org/ (well it should, see T257536), but the domain doesn't have HTTPS. The previous task for setting up the domain was T106311: pywikipedia.org is not responding; pywikibot.org is not registered.

On IRC @bd808 said that the current set up of having the DNS have a CNAME to wikimedia.org isn't sufficient for Wikimedia's Acme-chief generate a Let's Encrypt certificate for it.

@Vgutierrez, @Krenair, what other alternatives/options do we have to get HTTPS working?

Event Timeline

Restricted Application added subscribers: pywikibot-bugs-list, Aklapper. · View Herald Transcript

our acme-chief production environment uses dns-01 challenges to validate domain ownership against Let's Encrypt. In order to be able to issue a certificate for pywikibot.org we need to control the NS records for pywikibot.org (basically set them to ns[012].wikimedia.org)

Once T257536#6300167 is done, this should be possible.

ema triaged this task as Medium priority.Jul 21 2020, 3:39 PM

Indeed

willikins:~ vgutierrez$ curl -v https://pywikibot.org 2>&1| grep -i location:
< location: https://pywikibot.toolforge.org/
Ladsgroup claimed this task.

Cool :D