Actions
Bug #5274
closedWeb server should use HTTPS
Start date:
2023-12-22
Due date:
% Done:
0%
Estimated time:
Description
We require an appropriate SSL certificate for secure connections to http://seisbench.gfz-potsdam.de. Previously we used DFN to generate this. See https://geofon.gfz-potsdam.de/redmine/projects/geofon-1h-2h-maintenance/wiki/SSLCerts. But now Tina Rieger writes:
DFN is no longer our service partner for certificates.
So this will need a new procedure.
Updated by Peter Evans over 1 year ago
Certificate generation is described on the Superusers Wiki.
- Generate a CSR
- Upload the CSR file,
request.pem
- A few hours later, download. For Apache2, choose "Certificate (w/ issuer after), PEM encoded".
- Transfer this to rz-vm463.
Host name | :80 | :443 |
seisbench.gfz-potsdam.de | Should redirect | Succeeds |
rz-vm463 | Should succeed? | Fails with certificate error |
Updated by Peter Evans over 1 year ago
TODO:
- Redirect http.
- Commit and
git pull
on server.
Updated by Peter Evans 8 months ago
- Status changed from In Progress to Closed
All done.
- Certificate expires 2024-12-21. See Sectigo email of 2023-12-22.
- Have pulled the changes in
/etc/apache2
.
Updated by Peter Evans 4 months ago
- Related to Support #6211: Update SSL certificate in 2024 added
Actions