Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-13 Thread Jay Ashworth
- Original Message - From: Ryan Lane rlan...@gmail.com We just finished deploying a new SSL certificate to the sites. Now all *.m and *. certificates are included in a single certificate, except mediawiki.org. Unfortunately we somehow forgot mediawiki.org when we ordered the updated

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-13 Thread Ryan Lane
On Wed, Mar 13, 2013 at 8:12 PM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Ryan Lane rlan...@gmail.com We just finished deploying a new SSL certificate to the sites. Now all *.m and *. certificates are included in a single certificate, except mediawiki.org.

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-13 Thread Jeremy Baron
On Mar 13, 2013 11:13 PM, Jay Ashworth j...@baylink.com wrote: Hey, Ryan; did you see, perhaps on outages-discussion, the after action report from Microsoft about how their Azure SSL cert expiration screwup happened? Can you just link to the discussion archive?

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-13 Thread Jay Ashworth
- Original Message - From: Ryan Lane rlan...@gmail.com Hey, Ryan; did you see, perhaps on outages-discussion, the after action report from Microsoft about how their Azure SSL cert expiration screwup happened? What's the relevance here? Does ops have a procedure for avoiding

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-13 Thread Jay Ashworth
- Original Message - From: Jeremy Baron jer...@tuxmachine.com Can you just link to the discussion archive? Was a posting: http://blogs.msdn.com/b/windowsazure/archive/2013/03/01/details-of-the-february-22nd-2013-windows-azure-storage-disruption.aspx Cheers, -- jra -- Jay R. Ashworth

[Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Ryan Lane
We just finished deploying a new SSL certificate to the sites. Now all *.m and *. certificates are included in a single certificate, except mediawiki.org. Unfortunately we somehow forgot mediawiki.org when we ordered the updated cert. We'll be replacing this soon with another cert that had

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Brion Vibber
On Tue, Mar 12, 2013 at 3:43 PM, Ryan Lane rlan...@gmail.com wrote: We just finished deploying a new SSL certificate to the sites. Now all *.m and *. certificates are included in a single certificate, except mediawiki.org. Unfortunately we somehow forgot mediawiki.org when we ordered the

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Ryan Lane
On Tue, Mar 12, 2013 at 4:47 PM, Brion Vibber br...@pobox.com wrote: Thanks guys! -- brion Don't thank us too quick. We needed to revert this for mobile. Seems *. m.wikipedia.org was also missing from the cert. Needless to say I'll be writing a script that can be run against a cert to ensure

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Risker
On 12 March 2013 21:15, Ryan Lane rlan...@gmail.com wrote: On Tue, Mar 12, 2013 at 4:47 PM, Brion Vibber br...@pobox.com wrote: Thanks guys! -- brion Don't thank us too quick. We needed to revert this for mobile. Seems *. m.wikipedia.org was also missing from the cert. Needless to

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Ryan Lane
You mean: https://arbcom.en.wikipedia.org ? Our certificates have never covered that. That's a sub-sub domain, and our certs only cover single subdomains. We really need to rename all of our sub-sub domains to single subdomains for them to be covered (or we need to include every sub-subdomain in

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Risker
Yes, that's the wiki I mean. And I can see your point about all those sub-subdomains; there must be a stack of them. The domain name was changed fairly recently and we got the bad cert messages then, and added our exceptions. Tonight we got the messages again. Perhaps it was because the

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Ryan Lane
On Tue, Mar 12, 2013 at 9:45 PM, Risker risker...@gmail.com wrote: Yes, that's the wiki I mean. And I can see your point about all those sub-subdomains; there must be a stack of them. The domain name was changed fairly recently and we got the bad cert messages then, and added our

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Jeremy Baron
On Wed, Mar 13, 2013 at 12:50 AM, Ryan Lane rlan...@gmail.com wrote: I wonder if we have a bug in about renaming sub-subdomain wikis Let's use Bug 31335 - https://bugzilla.wikimedia.org/31335 -Jeremy ___ Wikitech-l mailing list

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Risker
On 13 March 2013 00:50, Ryan Lane rlan...@gmail.com wrote: On Tue, Mar 12, 2013 at 9:45 PM, Risker risker...@gmail.com wrote: Yes, that's the wiki I mean. And I can see your point about all those sub-subdomains; there must be a stack of them. The domain name was changed fairly recently

Re: [Wikitech-l] New unified SSL certificate deployed

2013-03-12 Thread Ryan Lane
On Tue, Mar 12, 2013 at 10:06 PM, Risker risker...@gmail.com wrote: Well, if you need to rename the wiki again, a bit of notice would be appreciated; it was rather a shock when folks went to log in using bookmarks, only to find they no longer worked. We still haven't finished cleaning up