[SAC] [Hosting] Issues with intermediate certificates [RESOLVED]

[Lance Albertson]

All,

This morning we encountered several problems with our openstack controllers
and other parts of our stack. Upon further investigation it was found that
the intermediate certificate we used with our wildcard certificate had
expired (We still use InCommons certificates for some sites). We went ahead
and renewed this certificate and it's intermediate certificates as well
which resolved the issue.

Unfortunately our monitoring doesn't include monitoring our intermediate
certification expiration, however thankfully most of these certificates
have a 20 year life span. I think we've resolved all of the outstanding
issues but please let us know if we missed a site or service which still is
serving the expired intermediate certificate. We'll continue to monitor the
situation.

Thanks-

-- 
Lance Albertson
Director
Oregon State University | Open Source Lab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20200530/c02768e0/attachment.html>
-------------- next part --------------
_______________________________________________
Hosting mailing list
Hosting at osuosl.org
https://lists.osuosl.org/mailman/listinfo/hosting