[SAC] [Hosting] Maintenance - VPN Migration - 2023-08-07

[Lance Albertson]

This was completed however we are still dealing with some minor issues.
>From what I can tell the VPN service should be working however I'm going to
hold out on sending new certificates until tomorrow once I figure out the
other issues.

Thanks for your patience.

On Tue, Aug 1, 2023 at 7:13 PM Lance Albertson <lance at osuosl.org> wrote:

>
> *Summary:*
>
> We are migrating services running on a legacy system which hosts OpenVPN
> and routing for some of our NAT networks to a newer set of machines. This
> will also upgrade our OpenVPN server to a newer version along with
> upgrading the default ciphers supported.In addition, this will be setup
> with a primary-secondary set of servers so we have some high
> availability with this service moving forward.
>
> We have updated our documentation [1] concerning our OpenVPN service which
> will be current after the maintenance next week. If you are running on an
> operating system which uses OpenSSL 3.x by default, you will need to get a
> new certificate from us which is signed using sha256 instead of sha1.
> Please see this section [2] of the documentation on how to get a new
> certificate. We'll send the updated certificates after the maintenance has
> been completed.
>
> [1] https://wiki.osuosl.org/howtos/vpn_config.html
> [2] https://wiki.osuosl.org/howtos/vpn_config.html#unable-to-connect
>
> *Affected Time (UTC):*
> 2023-08-07 21:00:00 - 2023-08-07 23:00:00 [0d 2h 0m 0s]
>
> Actual outage should only be a few minutes at most if everything goes well.
>
> *Affected services:*
> - OpenVPN (vpn.osuosl.org)
> - NAT routers for the following networks:
>   - 10.0.0.0/23
>   - 10.1.0.0/23
>   - 10.1.50.0/24
> - Hosts connected the subnets above will experience a brief outage
>
> --
> Lance Albertson
> Director
> Oregon State University | Open Source Lab
>


-- 
Lance Albertson
Director
Oregon State University | Open Source Lab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20230807/1e9e2dbd/attachment-0001.htm>
-------------- next part --------------
_______________________________________________
Hosting mailing list
Hosting at osuosl.org
https://lists.osuosl.org/mailman/listinfo/hosting