[SAC] [OSGeo] #2256: Migrate All HTTPS Certs to Lets Encrypt

[OSGeo]

#2256: Migrate All HTTPS Certs to Lets Encrypt
---------------------------+---------------------------------------
 Reporter:  wildintellect  |       Owner:  robe
     Type:  task           |      Status:  new
 Priority:  normal         |   Milestone:  Sysadmin Contract 2019-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------

Comment (by robe):

 I couldn't get letsencrypt to install on web.osgeo.osuosl.org so I
 reimaged it as a lxd container called old-web.

 Then I repointed fdo.osgeo.org, id.osgeo.org to new container proxying
 thru nginx.

 I did discover that even with the redirects, I could proxy (old or new)
 using https:/140.211.15.66:443 (I think it ends up using an eventually
 expired cert).

 Rather than fiddling with the redirect and having it go straight http, I
 decided to do

 https://old-web.lxd (it shows it's using letsencrypt, but since it relies
 on the ssl wild card about to expire, it may not hold - we'll see).

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2256#comment:7>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.