Page MenuHomePhabricator
Create Task
Maniphest T281366

Revoke debmonitor.discovery.wmnet
Closed, ResolvedPublic
Actions

Description

Revoke the old debmonitor.discover.wmnet CA and create ocsp/crl nrpe check
also remove config from puppet and remove from debmonitor trusted CA file

Details

SubjectRepoBranchLines +/-
pki: remove old (now revoked) intermediate CAoperations/puppetproduction+1 -4
cfssl-certs: Fix script to use correct akidoperations/puppetproduction+5 -3
cfssl: add revoke functionality to cfssl_certoperations/puppetproduction+73 -5
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedjbondT281369 Additional CFSSL tasks
 ResolvedjbondT281366 Revoke debmonitor.discovery.wmnet

Event Timeline

jbond triaged this task as Medium priority.Apr 28 2021, 1:53 PM
jbond created this task.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 28 2021, 1:53 PM
jbond updated the task description. (Show Details)Apr 28 2021, 2:10 PM
jbond added a parent task: T281369: Additional CFSSL tasks.Apr 28 2021, 2:22 PM
gerritbot added a comment.May 4 2021, 12:29 PM

Change 684884 had a related patch set uploaded (by Jbond; author: John Bond):

[operations/puppet@production] cfssl: add revoke functionality to cfssl_cert

https://gerrit.wikimedia.org/r/684884

gerritbot added a project: Patch-For-Review.May 4 2021, 12:29 PM
gerritbot added a comment.May 4 2021, 12:37 PM

Change 684884 merged by Jbond:

[operations/puppet@production] cfssl: add revoke functionality to cfssl_cert

https://gerrit.wikimedia.org/r/684884

Maintenance_bot removed a project: Patch-For-Review.May 4 2021, 1:11 PM
gerritbot added a comment.May 4 2021, 1:34 PM

Change 684926 had a related patch set uploaded (by Jbond; author: John Bond):

[operations/puppet@production] cfssl-certs: Fix script to use correct akid

https://gerrit.wikimedia.org/r/684926

gerritbot added a project: Patch-For-Review.May 4 2021, 1:34 PM

Change 684926 merged by Jbond:

[operations/puppet@production] cfssl-certs: Fix script to use correct akid

https://gerrit.wikimedia.org/r/684926

gerritbot added a comment.May 4 2021, 1:38 PM

Change 684930 had a related patch set uploaded (by Jbond; author: John Bond):

[operations/puppet@production] pki: remove old (now revoked) intermediate CA

https://gerrit.wikimedia.org/r/684930

gerritbot added a comment.May 4 2021, 1:40 PM

Change 684930 merged by Jbond:

[operations/puppet@production] pki: remove old (now revoked) intermediate CA

https://gerrit.wikimedia.org/r/684930

Maintenance_bot removed a project: Patch-For-Review.May 4 2021, 2:10 PM
jbond closed this task as Resolved.May 4 2021, 3:46 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL