Transition Technology: Ticket #385: Install new SSL certificate on TN.org

component changed

laura — Fri, 06 Jan 2012 15:05:13 GMT

component changed from Drupal modules & settings to Live server

hours, status, totalhours changed

chris — Fri, 06 Jan 2012 19:18:57 GMT

hours changed from 0.0 to 0.2
status changed from new to accepted
totalhours changed from 0.0 to 0.2

Whoever gets admin@… will need to click through a link:

we will send a confirmation email to the address admin@… for validation. If this address does not exist, then you will need to create it first.

I'm following the process documented at wiki:NewLiveServer#HTTPS

laura — Fri, 06 Jan 2012 20:00:36 GMT

Hi Chris - Thanks for this. I received the email, logged in and validated the request. (received message - Confirmation registered. The SSL activation process will now continue).

chris — Fri, 06 Jan 2012 21:06:34 GMT

Thanks, it's "In progress"... the existing cert is valid till 10th Feb so we can wait to see where it's at on Monday.

hours, totalhours changed

chris — Fri, 13 Jan 2012 11:17:30 GMT

hours changed from 0.0 to 0.1
totalhours changed from 0.2 to 0.3

It's still "in progress" -- I have raised a ticket with gandi about this.

chris — Fri, 13 Jan 2012 12:21:28 GMT

This is the reply from gandi.net:

On Fri 13-Jan-2012 at 01:02:13PM +0100, pro-en@… wrote:

Hi Chris,

Actually your SSL request is at the last step in the validation process. You should have received a verification mail sent by our partner Comodo to the e-mail address admin@…. In this mail you will find a validation link.

Once you have done that validation, your SSL certificate will be issued right away.

If that mailbox does not exist, please create it and make sure that it works. Then get back to me so I can relaunch the request which will make Comodo resend that mail.

I am at your disposal should you need any further information.

Best regards,

Karim

Laura, can you double check that there isn't a email to admin@ that you missed?

laura — Fri, 13 Jan 2012 13:58:35 GMT

Hmm, looking into this, I don't think I receive admin@ emails....

chris — Fri, 13 Jan 2012 14:03:13 GMT

Replying to laura:

I don't think I receive admin@ emails....

We need to track down who does as they will have one to click through to renew the cert.

laura — Fri, 13 Jan 2012 14:06:40 GMT

Replying to chris:

Replying to laura:

I don't think I receive admin@ emails....

We need to track down who does as they will have one to click through to renew the cert.

Just looked on the UH cpanel for email accounts and also email forwarders... nowt for admin@ (unless you know any different from your bits there!) Let me know if I need to set up an admin@ email account or forwarder. Thanks

chris — Fri, 13 Jan 2012 14:28:34 GMT

Replying to laura:

Let me know if I need to set up an admin@ email account or forwarder.

Yes, either, all it'll get is a email once a year to renew the cert with a link that needs to be clicked, set it up as an alias for webproject@ or yourself or whatever and let me know when it's done and I'll email gandi.net to ask them to have the email resent.

laura — Fri, 13 Jan 2012 14:51:30 GMT

Replying to chris:

Replying to laura:

Let me know if I need to set up an admin@ email account or forwarder.

Yes, either, all it'll get is a email once a year to renew the cert with a link that needs to be clicked, set it up as an alias for webproject@ or yourself or whatever and let me know when it's done and I'll email gandi.net to ask them to have the email resent.

I've set admin@… to forward to webproject@ (which forwards to my tn email address!)

hours, status, totalhours changed; resolution set

chris — Mon, 16 Jan 2012 10:39:31 GMT

hours changed from 0.0 to 0.4
status changed from accepted to closed
resolution set to fixed
totalhours changed from 0.3 to 0.7

I have installed and tested the new certificates on both the live and the development servers, everything seems fine so I'm closing this ticket.