[MediaWiki-commits] [Gerrit] operations/dns[master]: wikimedia.org CAA: split issue-vs-issuewild, document clearer

2017-08-22 Thread BBlack (Code Review) 
BBlack has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/373163 )

Change subject: wikimedia.org CAA: split issue-vs-issuewild, document clearer
..


wikimedia.org CAA: split issue-vs-issuewild, document clearer

Change-Id: I1c1eff183f10ad486e919312af0551c29c2ddc8a
---
M templates/wikimedia.org
1 file changed, 12 insertions(+), 4 deletions(-)

Approvals:
  BBlack: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/templates/wikimedia.org b/templates/wikimedia.org
index a8a29a4..14bc593 100644
--- a/templates/wikimedia.org
+++ b/templates/wikimedia.org
@@ -55,12 +55,20 @@
 
 donate  5M  IN TXT  "v=spf1 ip4:91.198.174.0/24 ip4:208.80.152.0/22 
ip6:2620:0:860::/46 include:_spf.google.com ip4:74.121.51.111 ~all"
 
-; CAA records
-; issue globalsign.com, issue digicert.com, issue letsencrypt.org, iodef 
mailto:dns-ad...@wikimedia.org
-; cf. https://sslmate.com/labs/caa/
-wikimedia.org.  5M  IN TYPE257 \# 21 00056973737565676C6F62616C7369676E2E636F6D
+
+; CAA records for wikimedia.org - all types for globalsign and digicert, 
non-wildcard for LE
+; cf. https://sslmate.com/labs/caa/, data below is:
+; 0 issue "digicert.com"
+; 0 issue "globalsign.com"
+; 0 issue "letsencrypt.org"
+; 0 issuewild "digicert.com"
+; 0 issuewild "globalsign.com"
+; 0 iodef "mailto:dns-ad...@wikimedia.org;
 wikimedia.org.  5M  IN TYPE257 \# 19 0005697373756564696769636572742E636F6D
+wikimedia.org.  5M  IN TYPE257 \# 21 00056973737565676C6F62616C7369676E2E636F6D
 wikimedia.org.  5M  IN TYPE257 \# 22 
000569737375656C657473656E63727970742E6F7267
+wikimedia.org.  5M  IN TYPE257 \# 23 
0009697373756577696C6464696769636572742E636F6D
+wikimedia.org.  5M  IN TYPE257 \# 25 
0009697373756577696C64676C6F62616C7369676E2E636F6D
 wikimedia.org.  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
 
 dumps   1H  IN CNAME dataset1001

-- 
To view, visit https://gerrit.wikimedia.org/r/373163
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I1c1eff183f10ad486e919312af0551c29c2ddc8a
Gerrit-PatchSet: 2
Gerrit-Project: operations/dns
Gerrit-Branch: master
Gerrit-Owner: BBlack 
Gerrit-Reviewer: BBlack 
Gerrit-Reviewer: jenkins-bot <>

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

[MediaWiki-commits] [Gerrit] operations/dns[master]: wikimedia.org CAA: split issue-vs-issuewild, document clearer

2017-08-22 Thread BBlack (Code Review) 
BBlack has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/373163 )

Change subject: wikimedia.org CAA: split issue-vs-issuewild, document clearer
..

wikimedia.org CAA: split issue-vs-issuewild, document clearer

Change-Id: I1c1eff183f10ad486e919312af0551c29c2ddc8a
---
M templates/wikimedia.org
1 file changed, 8 insertions(+), 6 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/dns 
refs/changes/63/373163/1

diff --git a/templates/wikimedia.org b/templates/wikimedia.org
index a8a29a4..2ba287e 100644
--- a/templates/wikimedia.org
+++ b/templates/wikimedia.org
@@ -55,13 +55,15 @@
 
 donate  5M  IN TXT  "v=spf1 ip4:91.198.174.0/24 ip4:208.80.152.0/22 
ip6:2620:0:860::/46 include:_spf.google.com ip4:74.121.51.111 ~all"
 
-; CAA records
-; issue globalsign.com, issue digicert.com, issue letsencrypt.org, iodef 
mailto:dns-ad...@wikimedia.org
+
+; CAA records for wikimedia.org - all types for globalsign and digicert, 
non-wildcard for LE
 ; cf. https://sslmate.com/labs/caa/
-wikimedia.org.  5M  IN TYPE257 \# 21 00056973737565676C6F62616C7369676E2E636F6D
-wikimedia.org.  5M  IN TYPE257 \# 19 0005697373756564696769636572742E636F6D
-wikimedia.org.  5M  IN TYPE257 \# 22 
000569737375656C657473656E63727970742E6F7267
-wikimedia.org.  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267
+wikimedia.org.  5M  IN TYPE257 \# 19 0005697373756564696769636572742E636F6D
 ; 0 issue "digicert.com"
+wikimedia.org.  5M  IN TYPE257 \# 21 
00056973737565676C6F62616C7369676E2E636F6D ; 0 issue "globalsign.com"
+wikimedia.org.  5M  IN TYPE257 \# 22 
000569737375656C657473656E63727970742E6F7267   ; 0 issue "letsencrypt.org"
+wikimedia.org.  5M  IN TYPE257 \# 23 
0009697373756577696C6464696769636572742E636F6D ; 0 issuewild "digicert.com"
+wikimedia.org.  5M  IN TYPE257 \# 25 
0009697373756577696C64676C6F62616C7369676E2E636F6D ; 0 issuewild 
"globalsign.com"
+wikimedia.org.  5M  IN TYPE257 \# 37 
0005696F6465666D61696C746F3A646E732D61646D696E4077696B696D656469612E6F7267 ; 0 
iodef "mailto:dns-ad...@wikimedia.org;
 
 dumps   1H  IN CNAME dataset1001
 

-- 
To view, visit https://gerrit.wikimedia.org/r/373163
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1c1eff183f10ad486e919312af0551c29c2ddc8a
Gerrit-PatchSet: 1
Gerrit-Project: operations/dns
Gerrit-Branch: master
Gerrit-Owner: BBlack 

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits