Expired certificate errors

[franciscouzo]

I got this error:

The certificate expired on 02/01/2017 06:03 PM. The current time is 02/01/2017 07:06 PM.

When trying to access https://python.org, www.python.org works just fine.

[malemburg]

On 01.02.2017 23:07, Francisco Couzo wrote: I got this error: > The certificate expired on 02/01/2017 06:03 PM. The current time is 02/01/2017 07:06 PM. When trying to access https://python.org, www.python.org works just fine.

The old StartSSL wildcard certificate *.python.org expired today. https://python.org/ is supposed to redirect to https://www.python.org/. Perhaps the redirector is still using the StartSSL cert ?!

…

-- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/

[ned-deily]

That means that the links on hg.python.org commit pages back to bugs.python.org are currently failing, for example, the link on https://hg.python.org/cpython/rev/aa7ac93d23b2 to Issue 20185.

[MarkMangoba]

@ned-deily @malemburg we are moving away from startssl, i've contacted Gandi but they are also having an issue with there provider at the moment. As soon as I get an update i'll update the issue.

[MarkMangoba]

@ned-deily @malemburg everything should be operational now, updated the wildcard *.python.org good till 2020.

[matrixise]

Are you sure ? I have an error with the SSL certificate from wiki.python.org
wiki.python.org uses an invalid security certificate. The certificate expired on 02/01/2017 10:03 PM. The current time is 02/02/2017 06:59 AM.

[MarkMangoba]

@matrixise sorry you are correct, wiki does not pass through lb, i'm going to have to ping @malemburg on this one.

[malemburg]

@MarkMangoba front.python.org, which the wiki uses as LB, still runs the old cert. Perhaps you need to restart the LB ?! See https://front.python.org/

[malemburg]

@MarkMangoba https://python.org/ does not seem to pass through front. I can see that python.org (without www.) now uses a new Gandi wildcard cert, but front.python.org still has the old StartSSL one.

The python.org server is hosted with Rackspace, whereas front is hosted at OSUOSL.

[malemburg]

AFAIK, front.python.org is still configured using Chef: https://github.com/python/psf-chef/tree/master/cookbooks/psf-loadbalancer instead of the new Salt stack we use for the Rackspace VMs: https://github.com/python/psf-salt

[MarkMangoba]

@malemburg thanks for the info, all resolved.

[malemburg]

On 02.02.2017 18:19, Mark Mangoba wrote: @malemburg thanks for the info, all resolved.

Thanks, Mark.

…

-- Marc-Andre Lemburg http://www.malemburg.com/