https://bugzilla.wikimedia.org/show_bug.cgi?id=71156

            Bug ID: 71156
           Summary: replace SHA1 certificates with SHA256
           Product: Wikimedia
           Version: wmf-deployment
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: SSL related
          Assignee: [email protected]
          Reporter: [email protected]
       Web browser: ---
   Mobile Platform: ---

Chrome 39 will warn users if SHA1 certificates are used and expire after
January 1, 2017.
Chrome 40 will warn users if SHA1 certificates are used and expire after June
1, 2016. 
Chrome 41 will warn users if SHA1 certificates are used and expire after
January 1, 2016.

Currently, it seems most of our servers are using SHA1 certificates with
different expiration dates:

Bugzilla -- ‎November ‎5, ‎2017 (!)
Blog -- September ‎16, ‎2017 (!)
bug-attachment.wikimedia.org -- September ‎7, ‎2017 (!)
Gerrit -- April ‎24, ‎2017 (!)
Shop -- ‎April ‎22, ‎2016
Dumps -- March ‎25, ‎2016
icinga-admin -- February 26, ‎2016
OTRS -- February ‎17, ‎2016
tendril -- February 14, ‎2016
en.planet -- February 3, ‎2016
Lists -- January ‎30, ‎2016
Wikitech -- January ‎25, ‎2016
Wikis (Wikipedia, etc.), donate -- January ‎20, ‎2016
librenms -- January 12, 2016
RT, etherpad -- January ‎9, ‎2016
noc, ganglia, icinga -- January 8, 2016
Git, gdash, graphite, integration, doc, contacts, racktables, ishmael --
October ‎18, ‎2015
tools.wmflabs.org -- September ‎15, ‎2015
svn -- ‎January ‎31, ‎2015

I think we should start upgrading these certificates as soon as possible.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to