BBlack has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/372900 )
Change subject: Setting namecheap/comodo CAA records ...................................................................... Setting namecheap/comodo CAA records policy.wikimedia.org will allow namecheap/comodo to issue certificates for policy.wikimedia.org only via CAA record Bug: T173787 Change-Id: I3d961abe468ed734aade22726672fc22618ffe96 --- M templates/wikimedia.org 1 file changed, 21 insertions(+), 0 deletions(-) Approvals: BBlack: Looks good to me, approved jenkins-bot: Verified diff --git a/templates/wikimedia.org b/templates/wikimedia.org index 14bc593..bbe2f95 100644 --- a/templates/wikimedia.org +++ b/templates/wikimedia.org @@ -71,6 +71,27 @@ wikimedia.org. 5M IN TYPE257 \# 25 0009697373756577696C64676C6F62616C7369676E2E636F6D wikimedia.org. 5M IN TYPE257 \# 37 0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267 +; CAA for policy.wikimedia.org +; policy is operated by a third party which uses Namecheap/Comodo to issue DV certs on our behalf +; we're also keeping all the base domain records here, as a Just In Case of any confusion on policy or wildcards/subdomains. +; data below is: +; 0 issue "digicert.com" +; 0 issue "globalsign.com" +; 0 issue "letsencrypt.org" +; 0 issue "comodoca.com" +; 0 issue "namecheap.com" +; 0 issuewild "digicert.com" +; 0 issuewild "globalsign.com" +; 0 iodef "mailto:dns-ad...@wikimedia.org"; +policy 5M IN TYPE257 \# 19 0005697373756564696769636572742E636F6D +policy 5M IN TYPE257 \# 21 00056973737565676C6F62616C7369676E2E636F6D +policy 5M IN TYPE257 \# 22 000569737375656C657473656E63727970742E6F7267 +policy 5M IN TYPE257 \# 19 00056973737565636F6D6F646F63612E636F6D +policy 5M IN TYPE257 \# 20 000569737375656E616D6563686561702E636F6D +policy 5M IN TYPE257 \# 23 0009697373756577696C6464696769636572742E636F6D +policy 5M IN TYPE257 \# 25 0009697373756577696C64676C6F62616C7369676E2E636F6D +policy 5M IN TYPE257 \# 37 0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267 + dumps 1H IN CNAME dataset1001 lists 5M IN A 208.80.154.21 -- To view, visit https://gerrit.wikimedia.org/r/372900 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I3d961abe468ed734aade22726672fc22618ffe96 Gerrit-PatchSet: 4 Gerrit-Project: operations/dns Gerrit-Branch: master Gerrit-Owner: RobH <r...@wikimedia.org> Gerrit-Reviewer: BBlack <bbl...@wikimedia.org> Gerrit-Reviewer: Platonides <platoni...@gmail.com> Gerrit-Reviewer: RobH <r...@wikimedia.org> Gerrit-Reviewer: Slaporte <stephen.lapo...@gmail.com> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
