wellcomecollection / platform

Wellcome Collection Digital Platform
https://developers.wellcomecollection.org/
MIT License
48 stars 10 forks source link

Update TXT validation record for certificate renewal #5748

Closed kenoir closed 5 months ago

kenoir commented 5 months ago

We need to update some TXT records in order that a 3rd party (Entrust) will issue SSL certificates for the following domains:

See these confluence pages for where these certs are used. These certificates are unrelated to the ones we used for user facing Cloudfront distributions, which are automatically updated and help in AWS.

This change is required so that some essential services continue to function (for example the internal staff facing catalogue site, some print services etc). The existing certificates will expire over the next few months.

[!NOTE] We may want to pass responsibility for maintaining these records to the Cloud team in D&T as there isn't a good reason for us to manage these.

See:

Related:

kenoir commented 5 months ago

Pinging @wellingk as there are duplicate records in https://github.com/wellcometrust/wellcome-dns-infra/tree/master/wellcomecollection that might be better as the source of truth for these particular records.

kenoir commented 5 months ago

Closing as done.