Page MenuHomeDevCentral
Create Task
Maniphest T654

Apply Let's encrypt SSL certificates for *.nasqueron.org
Closed, ResolvedPublic
Actions

Description

Rate limit

! According the rate limits in place during the public beta

The limit on Certificates/Domain is 5 certificates for a registered domain in a
sliding window of 7 days. We know it's restrictive at present; thank you for your
patience in helping us ensure Let's Encrypt is ready for the whole world.

Roadmap

Generate certificates at 4pm.

[ Done ]

  • -d wiki.nasqueron.org (test run)
  • -d wiki-old.nasqueron.org
  • -d metro.nasqueron.org
  • -d trustspace.nasqueron.org
  • -d install.nasqueron.org -d setup.nasqueron.org
  • -d databases.nasqueron.org -d database.nasqueron.org -d db.nasqueron.org
  • -d notifications.nasqueron.org -d builds.nasqueron.org -d build.nasqueron.org (added by T658 and T678)
  • -d mail.nasqueron.org -d mail.bioty.co -d mail.wolfplex.be -d mail.dereckson.be (T681)

[ 2016-01-27 ]

  • -d status.nasqueron.org
  • -d labs.nasqueron.org
  • -d docker.nasqueron.org -d docker51.nasqueron.org
  • -d tools51.nasqueron.org -d tools51.dereckson.be

[ 2016-02-03 ]

  • -d packages.nasqueron.org -d composer.packages.nasqueron.org
  • -d phabricator.nasqueron.org -d servers.nasqueron.org -d server.nasqueron.org -d serveur.nasqueron.org -d serveurs.nasqueron.org
  • -d white-rabbit.nasqueron.org
  • -d www51.nasqueron.org
  • -d api51.nasqueron.org

[ 2016-02-10 ]

  • -d quux.nasqueron.org
  • -d devcentral51.nasqueron.org
  • -d db51.nasqueron.org

Related Objects
Search...

Event Timeline

dereckson created this task.Jan 5 2016, 18:58
dereckson updated the task description. (Show Details)
dereckson moved this task from Backlog to Working on on the Servers board.
dereckson renamed this task from Generate Let's encrypt server for nasqueron.org to Apply Let's encrypt SSL certificates for *.nasqueron.org.Jan 5 2016, 19:07
dereckson reopened subtask T655: setup.nasqueron.org SSL compliance as Open.Jan 5 2016, 19:12
dereckson closed subtask T655: setup.nasqueron.org SSL compliance as Resolved.
dereckson added a comment.Jan 5 2016, 19:17

The 2016-01-05 series works.

dereckson updated the task description. (Show Details)Jan 7 2016, 16:58
dereckson updated the task description. (Show Details)
dereckson reopened subtask T659: Install letsencrypt on Dwellers as Open.Jan 7 2016, 17:39
dereckson closed subtask T659: Install letsencrypt on Dwellers as Resolved.Jan 7 2016, 17:49
dereckson lowered the priority of this task from Normal to Low.EditedJan 19 2016, 04:20

I've generated and deployed a temporary mega certificate:

DOMAINS="-d databases.nasqueron.org -d database.nasqueron.org -d db.nasqueron.org -d labs.nasqueron.org -d docker.nasqueron.org -d quux.nasqueron.org -d tools51.nasqueron.org -d tools51.dereckson.be -d devcentral51.nasqueron.org -d db51.nasqueron.org -d docker51.nasqueron.org -d packages.nasqueron.org -d composer.packages.nasqueron.org -d www51.nasqueron.org -d api51.nasqueron.org"  
DIR=/var/letsencrypt-auto

letsencrypt certonly --server https://acme-v01.api.letsencrypt.org/directory -a webroot --webroot-path=$DIR $DOMAINS
dereckson added a subtask: T679: Generate a SSL certificate for new Dwellers nasqueron.org services.Jan 19 2016, 04:44
dereckson closed subtask T679: Generate a SSL certificate for new Dwellers nasqueron.org services as Resolved.Jan 20 2016, 14:10
dereckson updated the task description. (Show Details)Jan 20 2016, 14:18

Added domains from Dwellers /etc/nginx.conf.

dereckson updated the task description. (Show Details)Jan 20 2016, 14:38
dereckson added a subtask: T681: Deployed SSL certificates on mail.*.
dereckson updated the task description. (Show Details)
dereckson updated the task description. (Show Details)Jan 20 2016, 14:40
dereckson added a comment.Jan 20 2016, 14:45

I've generated a SSL certificate valid for all the remaining domains hosted by Dwellers.

$ letsencrypt certonly --server https://acme-v01.api.letsencrypt.org/directory -a webroot --webroot-path=/www -d phabricator.nasqueron.org -d servers.nasqueron.org -d server.nasqueron.org -d serveur.nasqueron.org -d serveurs.nasqueron.org -d white-rabbit.nasqueron.org -d status.nasqueron.org
dereckson updated the task description. (Show Details)Jan 20 2016, 14:57
dereckson mentioned this in T784: Set up let's encrypt certificates renewal.Mar 16 2016, 01:45
dereckson created subtask T848: hotglue.nasqueron.org serves http:// content.Jun 3 2016, 17:06
dereckson closed subtask T848: hotglue.nasqueron.org serves http:// content as Resolved.Jun 3 2016, 18:02
dereckson created subtask T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content.Jun 3 2016, 21:30
dereckson closed subtask T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content as Resolved.Jun 4 2016, 00:58
dereckson added a subscriber: Sandlayth.EditedJun 4 2016, 02:07

Following work this week by @Sandlayth (Dwellers) and me (Ysul), all *.nasqueron.org sites are migrated to Let's encrypt certificates.

The only two remaining operations are:

  • to check the Mumble server
  • to migrate this "chain" certificate to smaller certificates
In T654#6389, @dereckson wrote:

I've generated and deployed a temporary mega certificate:

DOMAINS="-d databases.nasqueron.org -d database.nasqueron.org -d db.nasqueron.org -d labs.nasqueron.org -d docker.nasqueron.org -d quux.nasqueron.org -d tools51.nasqueron.org -d tools51.dereckson.be -d devcentral51.nasqueron.org -d db51.nasqueron.org -d docker51.nasqueron.org -d packages.nasqueron.org -d composer.packages.nasqueron.org -d www51.nasqueron.org -d api51.nasqueron.org"  
DIR=/var/letsencrypt-auto

letsencrypt certonly --server https://acme-v01.api.letsencrypt.org/directory -a webroot --webroot-path=$DIR $DOMAINS
dereckson created subtask T853: Deploy a Let's encrypt certificate to the Mumble server.Jun 4 2016, 02:11
dereckson created subtask T854: Write a Let's encrypt web server configuration checker.Jun 5 2016, 21:04
dereckson added a comment.EditedJun 5 2016, 22:22

Testing D396 script, three domains have issues.

Ysul

  • cloud.dereckson.be
  • commons.nasqueron.org

Dwellers

  • login.nasqueron.org
dereckson added a comment.Jun 9 2016, 02:17

agora.nasqueron.org still use a StartSSL (has been expired for 4 days)

dereckson added a comment.Jun 9 2016, 02:22

Fixed for Agora.

dereckson closed subtask T854: Write a Let's encrypt web server configuration checker as Resolved.Jun 9 2016, 10:46
dereckson added a subtask: T559: SSL certificate for docker.nasqueron.org.Jul 27 2016, 16:43
dereckson closed subtask T559: SSL certificate for docker.nasqueron.org as Resolved.
dereckson created subtask T971: Fix nginx configuration for commons.nasqueron.org to allow Let's encrypt.Aug 10 2016, 15:43
dereckson added a parent task: T822: SSL certificates: migrate from Startcom to Let's encrypt.
dereckson closed subtask T971: Fix nginx configuration for commons.nasqueron.org to allow Let's encrypt as Resolved.Aug 10 2016, 16:12
dereckson closed this task as Resolved.Dec 24 2016, 03:50
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator