Accessing beta, I get the message:
Websites prove their identity via certificates, which are valid for a set time period. The certificate for en.wikipedia.beta.wmflabs.org expired on 20/04/2022.
E.g.:
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | bd808 | T273956 acme-chief sometimes doesn't refresh certificates because it ignores SIGHUP | |||
| Resolved | Vgutierrez | T293585 [epic] The SSL certificate for Beta cluster domains fails to properly renew & deploy | |||
| Resolved | BUG REPORT | None | T306492 *.beta.wmflabs.org Certificate has expired (April 2022 edition) |
Event Timeline
Comment Actions
Last time I looked into an acme-chief issue on deployment-prep, the actual issue was with trafficserver-tls not using the new certificates (acme-chief had worked fine and provisioned the new certs into the deployment-cache-* hosts).
Comment Actions
root@deployment-cache-upload06:/etc/acmecerts/unified/live# openssl x509 -dates -noout -in rsa-2048.crt notBefore=Mar 21 06:30:15 2022 GMT notAfter=Jun 19 06:30:14 2022 GMT root@deployment-cache-upload06:/etc/acmecerts/unified/live# touch /srv/trafficserver/tls/etc/ssl_multicert.config && systemctl reload trafficserver-tls.service root@deployment-cache-upload06:/etc/acmecerts/unified/live#
It still seems to be an issue with trafficserver-tls.
Comment Actions
Superseded by T310957: *.beta.wmflabs.org Certificate has expired (June 2022 edition); current cert seems to be valid from Fri, 20 May 2022 06:25:47 GMT to Thu, 18 Aug 2022 06:25:46 GMT