On Wed, Dec 20, 2023 at 7:00 PM <[email protected]> wrote: > Is there a current one? The reason I ask is I'm trying to install OpenSearch > and ended up going down a rabbit hole with self-signed certificates per their > instructions. I'm operating on the ragged edge of how well I understand how > certificates work ☹️. If there was a WMF cert I could drop in, that would be > great.
Instead of having a certificate in your VM, I would suggest using the web proxy [1] provided by Cloud VPS. In this way, traffic from the internet to the web proxy is secured by the proxy's own SSL certificate, while traffic from the web proxy to your Cloud VPS instance does not use SSL at all. This means you need to disable SSL in OpenSearch, and let the proxy handle it. [1] https://wikitech.wikimedia.org/wiki/Help:Using_a_web_proxy_to_reach_Cloud_VPS_servers_from_the_internet -- Francesco Negri (he/him) -- IRC: dhinus Site Reliability Engineer, Cloud Services team Wikimedia Foundation _______________________________________________ Cloud mailing list -- [email protected] List information: https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
