Maniphest T100830

replace icinga's sha1 cert with sha256
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	RobH
	May 29 2015, 7:13 PM

Tags

Referenced Files

None

Subscribers

Description

Tracking task to replace icinga's sha1 cert with sha256, in multiple steps:

- reissue certificate in sha256
- update configuration to use new certificate
- push changes live
- revoke old sha1 certificate

Details

	Subject	Repo	Branch	Lines /-
	icinga.wikimedia.org cert sha1 to sha256	operations/puppet	production	27 -30

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		RobH	T73156 Replace SHA1 certificates with SHA256
		Resolved		BBlack	T100830 replace icinga's sha1 cert with sha256

Event Timeline

RobH created this task.May 29 2015, 7:13 PM

RobH raised the priority of this task from to Medium.

RobH updated the task description. (Show Details)

RobH added projects: acl*sre-team, HTTPS.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 29 2015, 7:13 PM

Change 214674 had a related patch set uploaded (by RobH):
icinga.wikimedia.org cert sha1 to sha256

https://gerrit.wikimedia.org/r/214674

gerritbot added a project: Patch-For-Review.May 29 2015, 7:13 PM

RobH mentioned this in T73156: Replace SHA1 certificates with SHA256.May 29 2015, 7:18 PM

Change 214674 merged by Dzahn:
icinga.wikimedia.org cert sha1 to sha256

https://gerrit.wikimedia.org/r/214674

Dzahn mentioned this in rOPUPcce614853a30: icinga.wikimedia.org cert sha1 to sha256.Jun 2 2015, 5:47 PM

fixed by @BBlack

https://gerrit.wikimedia.org/r/#/c/215404/
https://gerrit.wikimedia.org/r/#/c/215393/

https://www.ssllabs.com/ssltest/analyze.html?d=icinga.wikimedia.org

Dzahn closed this task as Resolved.Jun 2 2015, 8:14 PM

Dzahn assigned this task to BBlack.

Dzahn updated the task description. (Show Details)Jun 4 2015, 8:47 PM

Dzahn set Security to None.