[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 FunPika changed: What|Removed |Added Status|PATCH_TO_REVIEW |RESOLVED Resolution|--- |FIXED --- Comment #10 from FunPika --- Firefox isn't showing it as invalid now with a fresh profile, and http://www.sslshopper.com/ssl-checker.html#hostname=fastcci1.wmflabs.org is showing all green. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #9 from Daniel Zahn --- can you try again and report results please? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #8 from Daniel Zahn --- https://gerrit.wikimedia.org/r/#/c/126008/1 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #7 from Gerrit Notification Bot --- Change 111386 merged by Andrew Bogott: star.wmflabs.org: fix intermediate CA https://gerrit.wikimedia.org/r/111386 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #6 from FunPika --- I've noticed that in Firefox with a fresh profile this will lead to users getting the scary looking "This connection is untrusted" message. For something like accounts.wmflabs.org that routinely deals with new users to the project who may not be very tech savvy, this could be a problem. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 Tim Landscheidt changed: What|Removed |Added Status|NEW |PATCH_TO_REVIEW -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 Tim Landscheidt changed: What|Removed |Added Status|PATCH_TO_REVIEW |NEW CC||abog...@wikimedia.org Component|(other) |Infrastructure Assignee|t...@tim-landscheidt.de |wikibugs-l@lists.wikimedia. ||org --- Comment #5 from Tim Landscheidt --- Close, but no cigar. While using .chained.pem in the Nginx configuration is apparently The Right Thing(TM), the problem lies deeper: manifests/certs.pp's install_certificate creates the chained certificate for star.wmflabs.org with wmf-labs.pem, while the certificate is actually signed by RapidSSL_CA.pem. The patch by jeremyb should fix this. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #4 from Gerrit Notification Bot --- Change 111386 had a related patch set uploaded by Jeremyb: Dynamic proxy: Serve SSL certificate chain. v2 https://gerrit.wikimedia.org/r/111386 -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #3 from Gerrit Notification Bot --- Change 111342 merged by coren: Dynamic proxy: Serve SSL certificate chain https://gerrit.wikimedia.org/r/111342 -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 Tim Landscheidt changed: What|Removed |Added Assignee|wikibugs-l@lists.wikimedia. |t...@tim-landscheidt.de |org | -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #2 from Gerrit Notification Bot --- Change 111342 had a related patch set uploaded by Tim Landscheidt: Dynamic proxy: Serve SSL certificate chain https://gerrit.wikimedia.org/r/111342 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 Gerrit Notification Bot changed: What|Removed |Added Status|NEW |PATCH_TO_REVIEW -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 --- Comment #1 from Yuvi Panda --- It is the dynamic proxy, which uses the star.wmflabs.org certificate, which I presume needs to be fixed. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 60833] serve a cert chain with dynamic proxy SSL certificate
https://bugzilla.wikimedia.org/show_bug.cgi?id=60833 Yuvi Panda changed: What|Removed |Added CC||yuvipa...@gmail.com Summary|serve a cert chain with |serve a cert chain with |Instance proxy SSL |dynamic proxy SSL |certificate |certificate -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
