Page MenuHomeMiraheze

phab.miraheze.wiki cert expired
Closed, ResolvedPublic

Description

It expired at 02:32 UTC

UBN as it makes it very hard to use Phabricator as certain assets are load under this domain and they can’t be loaded when the cert is expired due to hsts.

Event Timeline

MacFan4000 triaged this task as Unbreak Now! priority.Mar 26 2021, 03:24
MacFan4000 created this task.
Unknown Object (User) moved this task from Backlog to Short Term on the MediaWiki (SRE) board.Mar 26 2021, 04:32

I've tried to renew but apparently it doesn't work. I noticed @Paladox also tried to renew 13 days ago but that obviously also seems to not have taken effect as it's expired today. Not sure why this is happening.

13:08:41 <+SPF|Cloud> first, the nginx config points to /etc/ssl/certs/miraheze.wiki.crt, but we have switched to /etc/ssl/localcerts 
13:09:17 <+SPF|Cloud> second, the certificate is valid for 'miraheze.wiki', but not phab.miraheze.wiki
Paladox claimed this task.

The certificate was renewed but we changed the path where the cert was stored so it was still using the old path. We've fixed it now and phab.miraheze.wiki works.

Even before the wildcard issue was fixed, from what I could see, it was using a cert that was issued on March 13th