| 1234qwer1234qwer4 | |
| Sep 30 2021, 9:52 PM |
| F34663256: croptool certificate.png | |
| Sep 30 2021, 9:52 PM |
List of steps to reproduce (step by step, including full links if applicable):
What happens?:
What should have happened instead?:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | TheDJ | T283164 Let's Encrypt issuance chains update | |||
| Resolved | SLyngshede-WMF | T283165 OpenSSL < 1.1.0 compatibility issues with new LE issuance chain | |||
| Resolved | None | T291387 Ensure Cloud Services platforms will accept new LE issuance chain | |||
| Resolved | BUG REPORT | Legoktm | T292263 Expired certificate error from CropTool when attempting OAuth login to mediawiki.org |
This is an issue in both modern Chrome and Firefox on Win10. It kind of sounds like T283164: Let's Encrypt issuance chains update? cc @BBlack
It looks like croptool is running on tools-sgewebgrid-lighttpd-0913, not k8s.
| No. | Name | Tool | State | Time | CPU | VMEM |
|---|---|---|---|---|---|---|
| 1258 | lighttpd-croptool | croptool | Webgrid-lighttpd / Running | 2021-03-25 18:09:02 | 1d12h38m53s | 217M/4G (peak 3.3G) |
AFAICT per T291387#7367931, tools-sgewebgrid-lighttpd-0913 has the correct openssl version:
legoktm@tools-sgewebgrid-lighttpd-0913:~$ dpkg -l | grep libssl ii libssl-dev:amd64 1.1.0l-1~deb9u4 amd64 Secure Sockets Layer toolkit - development files ii libssl1.0.2:amd64 1.0.2u-1~deb9u5 amd64 Secure Sockets Layer toolkit - shared libraries ii libssl1.1:amd64 1.1.0l-1~deb9u4 amd64 Secure Sockets Layer toolkit - shared libraries
However the fact that it hasn't been restarted since March might mean its using an older version of the library, lets see...
Mentioned in SAL (#wikimedia-cloud) [2021-10-01T01:46:45Z] <legoktm> Ran webservice restart for T292263