Page MenuHomeMiraheze

Members (1)

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

Tag for issues relating to SSL work.

Recent Activity

Tue, Jul 23

MacFan4000 closed T12331: Request to Update SSL Certificate for Domain Migration and Redirect as Resolved.
Tue, Jul 23, 17:57 · Technology-Team (MediaWiki), SSL
MacFan4000 closed T12338: Redirect gengbaike.top to www.gengbaike.top as Invalid.

It seems to already be redirecting?

Tue, Jul 23, 17:53 · Technology-Team (MediaWiki), SSL
MacFan4000 closed T12324: 301 redirect for junxions.wiki as Resolved.

added, will be deployed in ~30 mins.

Tue, Jul 23, 17:46 · SSL, Technology-Team (MediaWiki)
OrangeStar edited projects for T12324: 301 redirect for junxions.wiki, added: SSL; removed MediaWiki.
Tue, Jul 23, 11:16 · SSL, Technology-Team (MediaWiki)

Mon, Jul 22

MacFan4000 updated subscribers of T12374: Auto-renewal unreliable.
Mon, Jul 22, 18:06 · SRE Automation, Technology-Team, SSL
MacFan4000 triaged T12374: Auto-renewal unreliable as High priority.
Mon, Jul 22, 18:05 · SRE Automation, Technology-Team, SSL

Sat, Jul 20

OrangeStar added a comment to T12227: Cloudflare breaking ACME challenges and certificate auto-renew.

wiki.themanaworld.org will soon be affected by this as well. https://github.com/miraheze/ssl/blob/9cae2fc68ade9ac2aea0be325c5641f6ddf4dc60/certificates/wiki.themanaworld.org.crt will expire on Jul 31 19:57:12 2024 GMT

Sat, Jul 20, 13:56 · SSL, Cloudflare, Technology-Team (Infrastructure)
OrangeStar added a comment to T12227: Cloudflare breaking ACME challenges and certificate auto-renew.

Those wikis are affected by a different issue. This task is specifically about a bug that only affects custom domain wikis using Cloudflare. Those wikis also wouldn't show up in Icinga alerts.

Sat, Jul 20, 13:49 · SSL, Cloudflare, Technology-Team (Infrastructure)
BlankEclair added a comment to T12227: Cloudflare breaking ACME challenges and certificate auto-renew.

Seems like we're facing the effects of this, since there's an uptick of expired or soon-to-be expiring (and not renewed) certificates:

  • T12356
  • T12334
  • T12303
  • [20/07/2024 21:40] <icinga-miraheze> PROBLEM - wiki.misslessfighters.club - LetsEncrypt on sslhost is CRITICAL: CRITICAL - Certificate 'wiki.misslessfighters.club' expires in 7 day(s) (Sun 28 Jul 2024 11:18:10 AM GMT +0000).
  • [20/07/2024 20:17] <icinga-miraheze> PROBLEM - journeytheword.wiki - LetsEncrypt on sslhost is CRITICAL: CRITICAL - Certificate 'www.journeytheword.wiki' expires in 7 day(s) (Sun 28 Jul 2024 09:51:43 AM GMT +0000).
Sat, Jul 20, 12:41 · SSL, Cloudflare, Technology-Team (Infrastructure)
Void closed T12356: worldtriggerwiki: Certificate expired for custom domain as Resolved.

Regenerated and deploying.

Sat, Jul 20, 02:15 · Technology-Team (Infrastructure), SSL
BlankEclair renamed T12356: worldtriggerwiki: Certificate expired for custom domain from worldtriggerwiki: Certificate expired for custom domain to worldtriggerwiki: Certificate expired for custom domain.
Sat, Jul 20, 01:38 · Technology-Team (Infrastructure), SSL
BlankEclair added a comment to T12356: worldtriggerwiki: Certificate expired for custom domain.

I think tasks should still be triaged as normal even if an entire wiki is down (per Phorge#Filing tasks). I've poked #tech on Discord/#miraheze-tech on IRC to look into the issue though.

Sat, Jul 20, 01:29 · Technology-Team (Infrastructure), SSL

Fri, Jul 19

Discoballdust added a comment to T12356: worldtriggerwiki: Certificate expired for custom domain.

The wiki is literally down because of this. Our wiki is inaccessible. down. cant use it. I would consider this high priority.

Fri, Jul 19, 17:58 · Technology-Team (Infrastructure), SSL

Thu, Jul 18

BlankEclair triaged T12356: worldtriggerwiki: Certificate expired for custom domain as Normal priority.
Thu, Jul 18, 10:41 · Technology-Team (Infrastructure), SSL

Mon, Jul 15

MacFan4000 closed T12311: Redirect pages on gimkit.miraheze.org to gimkit.wiki as Resolved.
Mon, Jul 15, 16:17 · Technology-Team (MediaWiki), SSL
MacFan4000 closed T12334: SSL error on gengbaikewiki as Resolved.
Mon, Jul 15, 16:15 · Technology-Team (Infrastructure), SSL
Honglan233 created T12338: Redirect gengbaike.top to www.gengbaike.top.
Mon, Jul 15, 08:50 · Technology-Team (MediaWiki), SSL
BlankEclair edited projects for T12334: SSL error on gengbaikewiki, added: Technology-Team (Infrastructure); removed Technology-Team.
Mon, Jul 15, 06:11 · Technology-Team (Infrastructure), SSL
Honglan233 added projects to T12334: SSL error on gengbaikewiki: Technology-Team, SSL.
Mon, Jul 15, 04:27 · Technology-Team (Infrastructure), SSL

Sun, Jul 14

BlankEclair placed T12331: Request to Update SSL Certificate for Domain Migration and Redirect up for grabs.

I just realized that I have no idea what to do for issuing certificates (I think I need server access?), so I'll hand it off to other people

Sun, Jul 14, 11:52 · Technology-Team (MediaWiki), SSL
BlankEclair claimed T12331: Request to Update SSL Certificate for Domain Migration and Redirect.
Sun, Jul 14, 11:50 · Technology-Team (MediaWiki), SSL

Thu, Jul 11

Borderman added a comment to T12303: TLS certificate expired for thegreatwarwiki.

@MacFan4000 Thank you, all working again.

Thu, Jul 11, 20:58 · Technology-Team (MediaWiki), SSL
MacFan4000 closed T12139: Force redirect to custom domain as Resolved.
Thu, Jul 11, 20:10 · SSL, Technology-Team (MediaWiki)
MacFan4000 closed T12303: TLS certificate expired for thegreatwarwiki as Resolved.

Renewed, will be deployed in the next ~30 mins.

Thu, Jul 11, 20:06 · Technology-Team (MediaWiki), SSL
MacFan4000 closed T12312: Request to force a redirect into my custom domain. as Resolved.
Thu, Jul 11, 20:02 · SSL, Technology-Team (MediaWiki)
Borderman added a comment to T12303: TLS certificate expired for thegreatwarwiki.

@Imamy There doesn't seem to be an issue when using the .miraheze.org subdomain name, but using the .uk domain throws a "Safari can't open the page...because it can't establish a secure connection to the server".

Thu, Jul 11, 09:59 · Technology-Team (MediaWiki), SSL
Imamy added a comment to T12303: TLS certificate expired for thegreatwarwiki.

Even without the https://, one should be able to continue by clicking on the Continue to thegreatwar.uk (unsafe)

Thu, Jul 11, 00:56 · Technology-Team (MediaWiki), SSL
Imamy added a comment to T12303: TLS certificate expired for thegreatwarwiki.

I use Edge browser;

Thu, Jul 11, 00:51 · Technology-Team (MediaWiki), SSL

Wed, Jul 10

BlankEclair removed a project from T12312: Request to force a redirect into my custom domain.: MediaWiki.
Wed, Jul 10, 23:36 · SSL, Technology-Team (MediaWiki)
JAM_da_Productions added a project to T12312: Request to force a redirect into my custom domain.: SSL.
Wed, Jul 10, 18:40 · SSL, Technology-Team (MediaWiki)
TheLazySquid updated the task description for T12311: Redirect pages on gimkit.miraheze.org to gimkit.wiki.
Wed, Jul 10, 08:30 · Technology-Team (MediaWiki), SSL
BlankEclair added a comment to T12311: Redirect pages on gimkit.miraheze.org to gimkit.wiki.

PR: https://github.com/miraheze/ssl/pull/788

Wed, Jul 10, 08:28 · Technology-Team (MediaWiki), SSL
BlankEclair claimed T12311: Redirect pages on gimkit.miraheze.org to gimkit.wiki.
Wed, Jul 10, 08:25 · Technology-Team (MediaWiki), SSL
Borderman added a comment to T12303: TLS certificate expired for thegreatwarwiki.

Hi,

Are you sure you changed nothing in your DNS settings?

Wed, Jul 10, 08:21 · Technology-Team (MediaWiki), SSL
BlankEclair updated subscribers of T12303: TLS certificate expired for thegreatwarwiki.

Paging @Borderman to check the above comment as I do not operate that wiki

Wed, Jul 10, 07:17 · Technology-Team (MediaWiki), SSL
Reception123 added a comment to T12303: TLS certificate expired for thegreatwarwiki.

Are you sure you changed nothing in your DNS settings?

Wed, Jul 10, 06:32 · Technology-Team (MediaWiki), SSL

Tue, Jul 9

BlankEclair triaged T12303: TLS certificate expired for thegreatwarwiki as Normal priority.
Tue, Jul 9, 11:09 · Technology-Team (MediaWiki), SSL

Mon, Jul 8

BlankEclair closed T12287: Old Miraheze URL doesn't auto-redirect to new custom domain as Resolved.

PR merged. The redirect should take place in 30 to 60 minutes I believe. Please reopen if it doesn't

Mon, Jul 8, 01:56 · SSL, Technology-Team (MediaWiki), MediaWiki
BlankEclair added a comment to T12287: Old Miraheze URL doesn't auto-redirect to new custom domain.

PR: https://github.com/miraheze/ssl/pull/787

Mon, Jul 8, 01:07 · SSL, Technology-Team (MediaWiki), MediaWiki
BlankEclair claimed T12287: Old Miraheze URL doesn't auto-redirect to new custom domain.

I assumed it'd be a root domain issue, since going to the bare Miraheze subdomain on a wiki with a custom domain will redirect you to the subdomain, despite not requesting a redirect (example: https://rainverse.miraheze.org).

Mon, Jul 8, 01:04 · SSL, Technology-Team (MediaWiki), MediaWiki

Sun, Jul 7

ChaoticDevs added a comment to T12287: Old Miraheze URL doesn't auto-redirect to new custom domain.

Before we can conclude that it won't work because of my root setting, shouldn't we first manually enable redirecting on my page? It hasn't been turned on yet, and it seems that the aforementioned wikis that do redirect to custom domain, had to manually request it first as well: T12139

Sun, Jul 7, 15:36 · SSL, Technology-Team (MediaWiki), MediaWiki
ChaoticDevs added a project to T12287: Old Miraheze URL doesn't auto-redirect to new custom domain: SSL.
Sun, Jul 7, 15:24 · SSL, Technology-Team (MediaWiki), MediaWiki

Sun, Jun 30

BlankEclair renamed T12270: Move www.dccomicswiki.com to dccomicswiki.com and redirect www.dccomicswiki.com to dccomicswiki.com from Redirect dccomicswiki.com to www.dccomicswiki.com to Move www.dccomicswiki.com to dccomicswiki.com and redirect www.dccomicswiki.com to dccomicswiki.com.
Sun, Jun 30, 01:57 · SSL, Technology-Team (MediaWiki)
BlankEclair triaged T12270: Move www.dccomicswiki.com to dccomicswiki.com and redirect www.dccomicswiki.com to dccomicswiki.com as Normal priority.
Sun, Jun 30, 01:52 · SSL, Technology-Team (MediaWiki)

Tue, Jun 25

OrangeStar closed T12250: My Custom domain doesnt work as Resolved.
Tue, Jun 25, 10:29 · SSL, Technology-Team (Infrastructure)
OrangeStar closed T12248: Custom domain request: www.dccomicswiki.com as Resolved.

There were some technical issues that prevented the custom domain from working until now. Those have been solved and the custom domain is now working

Tue, Jun 25, 10:25 · Technology-Team (MediaWiki), SSL
BlankEclair lowered the priority of T12250: My Custom domain doesnt work from High to Normal.
Tue, Jun 25, 08:06 · SSL, Technology-Team (Infrastructure)
RhinosF1 placed T12250: My Custom domain doesnt work up for grabs.
Tue, Jun 25, 08:05 · SSL, Technology-Team (Infrastructure)

Jun 21 2024

OrangeStar added a project to T12204: WikiTide merger request into Miraheze: SSL.
Jun 21 2024, 11:52 · Technology-Team (MediaWiki), SSL

Jun 19 2024

OrangeStar added a parent task for T12227: Cloudflare breaking ACME challenges and certificate auto-renew: T12057: Migrate to CloudFlare.
Jun 19 2024, 15:17 · SSL, Cloudflare, Technology-Team (Infrastructure)