https://bugzilla.wikimedia.org/show_bug.cgi?id=71156
Bug ID: 71156
Summary: replace SHA1 certificates with SHA256
Product: Wikimedia
Version: wmf-deployment
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: SSL related
Assignee: [email protected]
Reporter: [email protected]
Web browser: ---
Mobile Platform: ---
Chrome 39 will warn users if SHA1 certificates are used and expire after
January 1, 2017.
Chrome 40 will warn users if SHA1 certificates are used and expire after June
1, 2016.
Chrome 41 will warn users if SHA1 certificates are used and expire after
January 1, 2016.
Currently, it seems most of our servers are using SHA1 certificates with
different expiration dates:
Bugzilla -- November 5, 2017 (!)
Blog -- September 16, 2017 (!)
bug-attachment.wikimedia.org -- September 7, 2017 (!)
Gerrit -- April 24, 2017 (!)
Shop -- April 22, 2016
Dumps -- March 25, 2016
icinga-admin -- February 26, 2016
OTRS -- February 17, 2016
tendril -- February 14, 2016
en.planet -- February 3, 2016
Lists -- January 30, 2016
Wikitech -- January 25, 2016
Wikis (Wikipedia, etc.), donate -- January 20, 2016
librenms -- January 12, 2016
RT, etherpad -- January 9, 2016
noc, ganglia, icinga -- January 8, 2016
Git, gdash, graphite, integration, doc, contacts, racktables, ishmael --
October 18, 2015
tools.wmflabs.org -- September 15, 2015
svn -- January 31, 2015
I think we should start upgrading these certificates as soon as possible.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l