New SSL Certificates needed

hbz / lobid

Linking Open Bibliographic Data

https://lobid.org/

Eclipse Public License 2.0

15 stars 4 forks source link

New SSL Certificates needed #383

Closed dr0i closed 3 years ago

dr0i commented 5 years ago

All two years or so the SSL certificates reached their EOL. The whole procedure of getting/installing certs is do be done again. Grr. See #182 for what was done before.

[x] https://lobid.org
[x] https://www.lobid.org
[x] https://beta.lobid.org
[x] https://blog.lobid.org
[x] https://test.lobid.org
[x] ~~https://vocabs.lobid.org~~ These would be cool to have sometime in the future:
[x] https://labs.lobid.org
[x] https://slides.lobid.org
[x] https://matomo.lobid.org
[x] https://etherpad.lobid.org

These are not of lobid's domain, but as certs are installed at the same time, herewith be included at this overview page:

dr0i commented 5 years ago

It will be easier if the domain is hosted by hbz and not united-domains. Made a new issue #384.

dr0i commented 5 years ago

All set up and tested ok. Closing.

dr0i commented 5 years ago

Remark: don't forget that there is SAN, meaning one certificate can handle multiple domain names. We will use this next time for lobid.org and its respective subdomains.

dr0i commented 3 years ago

Two years passed - time for renewal. Contacting IT, asking also for labs.lobid.org. Also SAN. Included into the FQDN list at https://github.com/hbz/lobid-blog/issues/69 labs.lobid.org.

acka47 commented 3 years ago

I also added matomo.lobid.org and etherpad.lobid.org in the original issue.

dr0i commented 3 years ago

All configured and commited in internal git repo. Completed the list (at the top of this issue). We still have vocabs.lobid.org in the SAN but it's not configured as vhost. Closing. Cu in 2 years.

dr0i commented 3 years ago

Oh, @acka47 you may want to have a look before closing this!

acka47 commented 3 years ago

Cu in 2 years.

It looks like the certificates for lobid, metafacture and Skohub only run for one year:

For NWBib it looks differently:

Shouldn't it have been updated as well?

Otherwise certificates look fine.

dr0i commented 3 years ago

Uh, you are right! Now copied the new cert and key into the proper place. @acka47 please check again.

acka47 commented 3 years ago

Looks good now. All certificats expire on 2022-02-20. Closing. See you in one year. ;-)