Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/build: update the version of x/crypto in order to resolve Let's Encrypt certificate revocation #50880

Closed
cagedmantis opened this issue Jan 28, 2022 · 2 comments
Labels
Builders NeedsFix Soon
Milestone

Comments

@cagedmantis
Copy link
Contributor

@cagedmantis cagedmantis commented Jan 28, 2022

Let's Encrypt is revoking a set of certificates as described in: Most certificates managed by autocert require manual renewal.

This related domains impacted by this are:
farmer.golang.org
vcs-test.golang.org
pubsubhelper.golang.org

We should update x/crypto in the x/build repository and deploy the impacted services in order to mitigate this.

cc @golang/release

@cagedmantis cagedmantis added Builders NeedsFix labels Jan 28, 2022
@cagedmantis cagedmantis added this to the Backlog milestone Jan 28, 2022
@cagedmantis cagedmantis self-assigned this Jan 28, 2022
@dmitshur dmitshur added the Soon label Jan 28, 2022
@dmitshur dmitshur added this to In Progress in Go Release Team Jan 28, 2022
@dmitshur dmitshur removed this from the Backlog milestone Jan 28, 2022
@dmitshur dmitshur added this to the Unreleased milestone Jan 28, 2022
@gopherbot
Copy link

@gopherbot gopherbot commented Jan 28, 2022

Change https://golang.org/cl/381735 mentions this issue: all: update the version of x/crypto

gopherbot pushed a commit to golang/build that referenced this issue Jan 28, 2022
This updates the version of x/crypto in order to mitigate the
revokation of Let's Encrypt certificates.

Updates golang/go#50880

Change-Id: I6c8004ebbcc4f51395242ac46f930a93588d0f09
Reviewed-on: https://go-review.googlesource.com/c/build/+/381735
Trust: Carlos Amedee <carlos@golang.org>
Run-TryBot: Carlos Amedee <carlos@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
@cagedmantis
Copy link
Contributor Author

@cagedmantis cagedmantis commented Jan 28, 2022

Re have resolved this by updating x/crypto in the build repository and redeploying the impacted services. We've also checked our list of golang.org subdomains any additional subdomains which may have been impacted.

Go Release Team automation moved this from In Progress to Done Jan 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Builders NeedsFix Soon
Projects
Development

No branches or pull requests

3 participants