Page MenuHomePhabricator

move planet behind misc-web
Closed, ResolvedPublic


move all the * virtual hosts behind misc-web as a subtask of T60048

related gerrit changes:

varnish: (regex lgtm)

DNS (yep)

install *planet. wildcard SSL cert on misc-web (ok with Faidon per comments on parent ticket?)

Event Timeline

Dzahn raised the priority of this task from to Needs Triage.
Dzahn updated the task description. (Show Details)
Dzahn added a subscriber: Dzahn.

Change 181984 had a related patch set uploaded (by Dzahn):
planets: remove SSL stanza


Aklapper added a project: Wikimedia-Planet.
Dzahn added subscribers: faidon, JohnLewis.

< mutante> paravoid: are you against installing the planet SSL cert on misc-web? you said once " Planet needs its own certificate anyway (second-level wildcard), so there is not much incentive here." but that would install it

the cert got installed on cp1043/cp1044 after merging the above. then merged John's change to add it to varnish config.

hacked my /etc/hosts to test it before switching DNS. current issue: i still get the * cert and it doesn't seem to match the server name and provide *.planet cert even though a new nginx site has been created by puppet with:

server_name *;

just had to restart nginx on cp1043/cp1044 manually, then it worked.


works for me. tested with curl. resolving.

Dzahn mentioned this in Unknown Object (Diffusion Commit).Jan 14 2015, 4:52 PM

Change 195306 had a related patch set uploaded (by Dzahn):
delete * SSL cert

Change 195306 abandoned by Dzahn:
delete * SSL cert