After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 628091 - bugzilla.gnome.org StartSSL Certificate Expiration, 03:46 am 27 Aug 2010
bugzilla.gnome.org StartSSL Certificate Expiration, 03:46 am 27 Aug 2010
Status: RESOLVED FIXED
Product: sysadmin
Classification: Infrastructure
Component: Certificates
unspecified
Other All
: Normal normal
: ---
Assigned To: Christer Edwards
GNOME Sysadmins
Depends on:
Blocks:
 
 
Reported: 2010-08-27 06:28 UTC by Olav Vitters
Modified: 2010-08-28 02:25 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Olav Vitters 2010-08-27 06:28:22 UTC 
This mail is intended for the person who owns a digital certificate issued by the StartSSL™ Certification Authority (http://www.startssl.com/).

The server certificate for bugzilla.gnome.org and serial number 42883 (A783) is about to expire within the next two weeks. Please log into the StartSSL Control Panel at https://www.startssl.com/?app=12 and get a new certificate for this
+purpose.

--
Best Regards
 
StartCom Ltd.
StartSSL™ Certification Authority
Comment 1 Christer Edwards 2010-08-27 20:21:19 UTC 
started work on this. hope to be done this afternoon.
Comment 2 Christer Edwards 2010-08-27 21:05:50 UTC 
I've finished the process and have the .key, .csr and .crt on my laptop ready to go. I found that I don't have appropriate access (sudo) on vbox2 (bugzilla-web), so I'm unable to configure the new cert.

If this is specifically handled by another admin, let me know and I'll get the files to them. If I should have sudo access and it's been overlooked, perhaps someone can take care of that for me and I'll get this finished.
Comment 3 Christer Edwards 2010-08-28 02:25:19 UTC 
done.

old config backed up as 'bugzilla.gnome.org-2009'.

new .crt,.key placed in /etc/pki/tls/{certs,private}/2010/bugzilla.gnome.org.{crt,key}.

(I have generally used a YYYY standard for storing annual certs. We don't have to stick to this, but I used it to maintain the old files just-in-case during the transition.)

Cert appears to be updated. No major explosions.