[MediaWiki-commits] [Gerrit] operations/dns[master]: Setting namecheap/comodo CAA records

2017-08-22 Thread BBlack (Code Review) 
BBlack has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/372900 )

Change subject: Setting namecheap/comodo CAA records
..


Setting namecheap/comodo CAA records

policy.wikimedia.org will allow namecheap/comodo to issue certificates
for policy.wikimedia.org only via CAA record

Bug: T173787
Change-Id: I3d961abe468ed734aade22726672fc22618ffe96
---
M templates/wikimedia.org
1 file changed, 21 insertions(+), 0 deletions(-)

Approvals:
  BBlack: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/templates/wikimedia.org b/templates/wikimedia.org
index 14bc593..bbe2f95 100644
--- a/templates/wikimedia.org
+++ b/templates/wikimedia.org
@@ -71,6 +71,27 @@
 wikimedia.org.  5M  IN TYPE257 \# 25 
0009697373756577696C64676C6F62616C7369676E2E636F6D
 wikimedia.org.  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
 
+; CAA for policy.wikimedia.org
+; policy is operated by a third party which uses Namecheap/Comodo to issue DV 
certs on our behalf
+; we're also keeping all the base domain records here, as a Just In Case of 
any confusion on policy or wildcards/subdomains.
+; data below is:
+; 0 issue "digicert.com"
+; 0 issue "globalsign.com"
+; 0 issue "letsencrypt.org"
+; 0 issue "comodoca.com"
+; 0 issue "namecheap.com"
+; 0 issuewild "digicert.com"
+; 0 issuewild "globalsign.com"
+; 0 iodef "mailto:dns-ad...@wikimedia.org;
+policy  5M  IN TYPE257 \# 19 0005697373756564696769636572742E636F6D
+policy  5M  IN TYPE257 \# 21 00056973737565676C6F62616C7369676E2E636F6D
+policy  5M  IN TYPE257 \# 22 
000569737375656C657473656E63727970742E6F7267
+policy  5M  IN TYPE257 \# 19 00056973737565636F6D6F646F63612E636F6D
+policy  5M  IN TYPE257 \# 20 000569737375656E616D6563686561702E636F6D
+policy  5M  IN TYPE257 \# 23 
0009697373756577696C6464696769636572742E636F6D
+policy  5M  IN TYPE257 \# 25 
0009697373756577696C64676C6F62616C7369676E2E636F6D
+policy  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
+
 dumps   1H  IN CNAME dataset1001
 
 lists   5M  IN A208.80.154.21

-- 
To view, visit https://gerrit.wikimedia.org/r/372900
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I3d961abe468ed734aade22726672fc22618ffe96
Gerrit-PatchSet: 4
Gerrit-Project: operations/dns
Gerrit-Branch: master
Gerrit-Owner: RobH 
Gerrit-Reviewer: BBlack 
Gerrit-Reviewer: Platonides 
Gerrit-Reviewer: RobH 
Gerrit-Reviewer: Slaporte 
Gerrit-Reviewer: jenkins-bot <>

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

[MediaWiki-commits] [Gerrit] operations/dns[master]: Setting namecheap/comodo CAA records

2017-08-21 Thread RobH (Code Review) 
RobH has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/372900 )

Change subject: Setting namecheap/comodo CAA records
..

Setting namecheap/comodo CAA records

policy.wikimedia.org will allow namecheap/comodo to issue certificates
for policy.wikimedia.org only via CAA record

Bug: T173787
Change-Id: I3d961abe468ed734aade22726672fc22618ffe96
---
M templates/wikimedia.org
1 file changed, 5 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/dns 
refs/changes/00/372900/1

diff --git a/templates/wikimedia.org b/templates/wikimedia.org
index 429e101..9679cef 100644
--- a/templates/wikimedia.org
+++ b/templates/wikimedia.org
@@ -62,6 +62,11 @@
 wikimedia.org.  5M  IN TYPE257 \# 19 0005697373756564696769636572742E636F6D
 wikimedia.org.  5M  IN TYPE257 \# 22 
000569737375656C657473656E63727970742E6F7267
 wikimedia.org.  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
+; issue comodo.com, iodef mailto:dns-ad...@wikimedia.org
+; cf. https://sslmate.com/labs/caa/
+policy.wikimedia.org.  5M  IN TYPE257  \# 19 
00056973737565636F6D6F646F63612E636F6D
+policy.wikimedia.org.  5M  IN TYPE257  \# 12 0009697373756577696C643B
+policy.wikimedia.org.  5M  IN TYPE257  \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
 
 dumps   1H  IN CNAME dataset1001
 

-- 
To view, visit https://gerrit.wikimedia.org/r/372900
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I3d961abe468ed734aade22726672fc22618ffe96
Gerrit-PatchSet: 1
Gerrit-Project: operations/dns
Gerrit-Branch: master
Gerrit-Owner: RobH 

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits