Page MenuHomeMiraheze
Create Task
Maniphest T10449

SSL for custom domain: nmc.miraheze.org
Closed, ResolvedPublic
Actions

Description

Wiki URL: nmc.miraheze.org

Your custom domain: wiki.nmc.games

Do you want Let's Encrypt: No

Related Objects

Event Timeline

Asquidbro created this task.Feb 7 2023, 12:24
Herald added subscribers: Agent_Isai, Unknown Object (User), Reception123. · View Herald TranscriptFeb 7 2023, 12:24
Asquidbro added a comment.Feb 7 2023, 12:28

p.s. sent email to: sre@miraheze.org

email subject: "SSL certificate for nmc.miraheze.org and wiki.nmc.games"

OrangeStar mentioned this in T10448: SSL for custom domain: nmc.miraheze.org.Feb 7 2023, 13:12
Reception123 added a comment.Feb 8 2023, 08:27

@Asquidbro We can't use SSLs that haven't been generated using our CSRs. Here is one for your domain:

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Asquidbro added a comment.Feb 8 2023, 11:57
In T10449#210662, @Reception123 wrote:

@Asquidbro We can't use SSLs that haven't been generated using our CSRs. Here is one for your domain:

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Sent you PEM for this CSR to email: sre@miraheze.org

OrangeStar moved this task from Backlog to CNAME on the SSL board.Feb 9 2023, 11:11
Asquidbro added a subscriber: OrangeStar.Feb 11 2023, 14:04

@OrangeStar any updates pls?)

RhinosF1 moved this task from CNAME to Waiting on response on the SSL board.Feb 12 2023, 10:26
RhinosF1 subscribed.
In T10449#211027, @Asquidbro wrote:

@OrangeStar any updates pls?)

The certificate provided is not valid.

Please be reminded that Miraheze does not permit the use of proxy servers between our setup and your users like Cloudflare. If you wish to use Cloudflare, please switch to DNS only and provide a valid certificate or allow us to generate an LE one.

Asquidbro added a comment.Feb 12 2023, 16:55
In T10449#211124, @RhinosF1 wrote:
In T10449#211027, @Asquidbro wrote:

@OrangeStar any updates pls?)

The certificate provided is not valid.

Please be reminded that Miraheze does not permit the use of proxy servers between our setup and your users like Cloudflare. If you wish to use Cloudflare, please switch to DNS only and provide a valid certificate or allow us to generate an LE one.

Ok, use LE certificate, just send me email with it's data

Herald removed a subscriber: RhinosF1. · View Herald TranscriptFeb 12 2023, 16:55
MacFan4000 closed this task as Resolved.Feb 12 2023, 17:30
MacFan4000 claimed this task.
MacFan4000 subscribed.

I have now setup a LE cert. Should be good to go within the next half hour. All public keys are available at https://github.com/miraheze/ssl

Asquidbro reopened this task as Open.Feb 13 2023, 06:58

@MacFan4000 why wiki.nmc.games is not attached to nmc.miraheze.org? (https://phabricator.miraheze.org/T10448) This task was attached at the beggining. Could you help me pls?)

Reception123 closed this task as Resolved.Feb 13 2023, 13:45

Works now, looks like there was an oversight.