Skip to content

Swapped out host-specific cert/key for wildcard version#171

Merged
thecaffiend merged 1 commit into
mainfrom
169-swap-out-static-app-alb-cert-for-a-wildcard-one
Oct 22, 2024
Merged

Swapped out host-specific cert/key for wildcard version#171
thecaffiend merged 1 commit into
mainfrom
169-swap-out-static-app-alb-cert-for-a-wildcard-one

Conversation

@thecaffiend
Copy link
Copy Markdown
Member

This PR contains a simple change to the config, but goes with new wildcard certs that are not in the repo. This has been deployed, but you will need to update your assets/untracked/tls/dap-ui files to match so future deployments do not fail.

TO TEST

  • As this has already been deployed, testing is just making sure that the files are what we think and that the sites protected by the certs are still accessible.
    • Go into ACM manager in AWS and ensure we have 2 certs. One for domain server (this is the horribly named VPN cert) and one for domain *.cape-dev.org (this is the new one for the PVSL ALBs
    • get on the VPN (there's a new config if you haven't updated since 2024.10.22) and hit https://analysis-pipelines.cape-dev.org/dap-ui and make sure the page loads. In whatever manner your browser allows you to look at the server cert info, make sure the cert is issued to the Common Name (CN) *.cape-dev.org and is issued by the Common Name (CN) cape-dev.org (no asterisk in this one)
  • Approve PR

@thecaffiend thecaffiend linked an issue Oct 22, 2024 that may be closed by this pull request
@thecaffiend thecaffiend requested a review from mehalter October 22, 2024 16:20
Copy link
Copy Markdown
Member

@mehalter mehalter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@thecaffiend thecaffiend merged commit 8e86628 into main Oct 22, 2024
@thecaffiend thecaffiend deleted the 169-swap-out-static-app-alb-cert-for-a-wildcard-one branch October 22, 2024 18:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

swap out static app alb cert for a wildcard one

2 participants