Project

General

Profile

Actions

Bug #5274

closed

Web server should use HTTPS

Added by Peter Evans over 1 year ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Start date:
2023-12-22
Due date:
% Done:

0%

Estimated time:

Description

We require an appropriate SSL certificate for secure connections to http://seisbench.gfz-potsdam.de. Previously we used DFN to generate this. See https://geofon.gfz-potsdam.de/redmine/projects/geofon-1h-2h-maintenance/wiki/SSLCerts. But now Tina Rieger writes:

DFN is no longer our service partner for certificates.

So this will need a new procedure.


Related issues 1 (0 open1 closed)

Related to SeisBench model training - Support #6211: Update SSL certificate in 2024ClosedPeter Evans2024-12-17

Actions
Actions #1

Updated by Peter Evans over 1 year ago

  • Status changed from New to In Progress
Actions #2

Updated by Peter Evans over 1 year ago

Certificate generation is described on the Superusers Wiki.

  • Generate a CSR
  • Upload the CSR file, request.pem
  • A few hours later, download. For Apache2, choose "Certificate (w/ issuer after), PEM encoded".
  • Transfer this to rz-vm463.
Host name :80 :443
seisbench.gfz-potsdam.de Should redirect Succeeds
rz-vm463 Should succeed? Fails with certificate error
Actions #3

Updated by Peter Evans over 1 year ago

TODO:
  • Redirect http.
  • Commit and git pull on server.
Actions #4

Updated by Peter Evans 8 months ago

  • Status changed from In Progress to Closed

All done.

  • Certificate expires 2024-12-21. See Sectigo email of 2023-12-22.
  • Have pulled the changes in /etc/apache2.
Actions #5

Updated by Peter Evans 4 months ago

Actions

Also available in: Atom PDF