Transition Technology: Ticket #829: Creation of web space request

status, totalhours, component, hours, owner, type changed; cc, milestone set

chris — Mon, 02 Feb 2015 12:25:07 GMT

status changed from new to accepted
totalhours changed from 0.0 to 0.4
cc chris added
component changed from Unassigned to Parrot server
hours changed from 0.0 to 0.4
milestone set to Maintenance
owner changed from ade to chris
type changed from defect to maintenance

The live Gandi Zone file, Transition Network (4) contains the following and I don't have write access to it (because Ed was the last one to updated it):

* 3600 IN A 81.95.52.103
*.newdev 3600 IN A 81.95.52.103
*.parrot 3600 IN A 81.95.52.43
2010.archive 3600 IN A 81.95.52.111
2011.archive 3600 IN A 81.95.52.111
@ 3600 IN A 81.95.52.103
lists 3600 IN A 212.113.133.235
mail 3600 IN A 212.113.133.235
newdev 3600 IN A 81.95.52.103
parrot 3600 IN A 81.95.52.43
penguin 3600 IN A 81.95.52.111
power 3600 IN A 81.95.52.111
puffin 3600 IN A 81.95.52.103
redirects 3600 IN A 81.95.52.111
static 3600 IN A 81.95.52.111
stats 3600 IN A 81.95.52.111
tech 3600 IN A 81.95.52.111
totnes 3600 IN A 81.95.52.111
trac 3600 IN A 81.95.52.111
wagn 3600 IN A 81.95.52.111
wiki 3600 IN A 81.95.52.111
www 3600 IN A 81.95.52.103
www.penguin 3600 IN A 81.95.52.111
www.totnes 3600 IN A 81.95.52.111
www.wiki 3600 IN A 81.95.52.111
79D80BA704E7BB649F5AD14FA6F6F972 10800 IN CNAME 1efe45ccc62378ef1ca615725e11befe9404777a.comodoca.com.
7d72687fce85678abd244184d39746c3 10800 IN CNAME alu53248cf779400e23ee3920e7423e60ad13858841.comodoca.com.
@ 3600 IN MX 5 alt1.aspmx.l.google.com.
@ 3600 IN MX 5 alt2.aspmx.l.google.com.
@ 3600 IN MX 1 aspmx.l.google.com.
@ 3600 IN MX 10 aspmx2.googlemail.com.
@ 3600 IN MX 10 aspmx3.googlemail.com.
tech 10800 IN MX 10 mx.webarch.net.alu
@ 3600 IN TXT "google-site-verification=aooK9AklevXMJTRHVQUG5cF1Ubz4MgPwcNLVmHMMkkk"
@ 3600 IN TXT "google-site-verification=SwCShCh4Rzz49ODhh8juQQNcgiD5IBHzbd-zgJIqi64"
@ 3600 IN TXT "v=spf1 include:_spf.google.com ~all"

So I have copied the above to the Transition Network Zone file and edited it to:

* 3600 IN A 81.95.52.103
*.newdev 3600 IN A 81.95.52.103
*.parrot 3600 IN A 81.95.52.43
2010.archive 3600 IN A 81.95.52.111
2011.archive 3600 IN A 81.95.52.111
@ 3600 IN A 81.95.52.103
lists 3600 IN A 212.113.133.235
mail 3600 IN A 212.113.133.235
newdev 3600 IN A 81.95.52.103
parrot 3600 IN A 81.95.52.43
penguin 3600 IN A 81.95.52.111
power 3600 IN A 81.95.52.111
projects 3600 IN A 81.95.52.43
puffin 3600 IN A 81.95.52.103
redirects 3600 IN A 81.95.52.111
static 3600 IN A 81.95.52.111
stats 3600 IN A 81.95.52.111
tech 3600 IN A 81.95.52.111
totnes 3600 IN A 81.95.52.111
trac 3600 IN A 81.95.52.111
wagn 3600 IN A 81.95.52.111
wiki 3600 IN A 81.95.52.111
www 3600 IN A 81.95.52.103
www.penguin 3600 IN A 81.95.52.111
www.projects 3600 IN A 81.95.52.43
www.totnes 3600 IN A 81.95.52.111
www.wiki 3600 IN A 81.95.52.111
@ 3600 IN MX 5 alt1.aspmx.l.google.com.
@ 3600 IN MX 5 alt2.aspmx.l.google.com.
@ 3600 IN MX 1 aspmx.l.google.com.
@ 3600 IN MX 10 aspmx2.googlemail.com.
@ 3600 IN MX 10 aspmx3.googlemail.com.
tech 10800 IN MX 10 mx.webarch.net.
@ 3600 IN TXT "google-site-verification=aooK9AklevXMJTRHVQUG5cF1Ubz4MgPwcNLVmHMMkkk"
@ 3600 IN TXT "google-site-verification=SwCShCh4Rzz49ODhh8juQQNcgiD5IBHzbd-zgJIqi64"
@ 3600 IN TXT "v=spf1 include:_spf.google.com ~all"

I then used the curses-create-user script to create an account, then edited the /root/webarch/accounts/sites.txt file to add the aliases:

projects default projects.parrot.webarch.net projects.parrot.transitionnetwork.org,projects.transitionnetwork.org,www.projects.transitionnetwork.org

and ran buildapache projects to rebuild the Apache config.

Ade -- you should have a email with the SFTP login details (note it is SFTP not FTP), if you don't have a SFTP client I'd suggest:

https://filezilla-project.org/

The directory to upload the website to is ~/sites/default/ and you can access the site using this URL (once the DNS has updated):

https://projects.transitionnetwork.org/

Before then you can use:

https://projects.parrot.transitionnetwork.org/ (this needs the CAcert.org root cert installing, click this link in Firefox to do this http://www.cacert.org/certs/root.crt )

Once the DNS has updated I'll switch the site to use the *.transitionnetwork.org cert, it hasn't updated yet:

dig @A.DNS.GANDI.NET projects.transitionnetwork.org +short
81.95.52.103
dig @A.DNS.GANDI.NET projects.parrot.transitionnetwork.org +short
81.95.52.43

hours, totalhours changed

chris — Mon, 02 Feb 2015 12:40:57 GMT

hours changed from 0.0 to 0.19
totalhours changed from 0.4 to 0.59

The Gandi DNS servers have updated:

dig @A.DNS.GANDI.NET projects.transitionnetwork.org +short
81.95.52.43
dig @B.DNS.GANDI.NET projects.transitionnetwork.org +short
81.95.52.43
dig @C.DNS.GANDI.NET projects.transitionnetwork.org +short
81.95.52.43

So I have switched the site to use the *.transitionnetwork.org cert:

cd /etc/ssl/wsh/
ls -lah | grep projects
lrwxrwxrwx 1 root root       21 Feb  2 12:13 projects.parrot.webarch.net-cert.pem -> /etc/ssl/wsh/cert.pem
lrwxrwxrwx 1 root root       20 Feb  2 12:13 projects.parrot.webarch.net-key.pem -> /etc/ssl/wsh/key.pem
lrwxrwxrwx 1 root root       21 Feb  2 12:13 projects.parrot.webarch.net-root.pem -> /etc/ssl/wsh/root.pem
 ls -lah ../transitionnetwork.org/
total 60K
drwxr-xr-x 5 root root 4.0K Jan 23 11:19 .
drwxr-xr-x 7 root root 4.0K Jan 11 13:36 ..
drwx------ 2 root root 4.0K Jan 24  2014 2013
drwx------ 2 root root 4.0K Jan 23 11:19 2014
drwx------ 2 root root 4.0K Jan 23 11:19 2015
-rw------- 1 root root 2.1K Jan 20 14:45 GandiStandardSSLCA2.pem
-rw------- 1 root root 1.4K May 30  2000 USERTrustRSAAddTrustCA.crt
-rw------- 1 root root 2.0K Jan 22 14:47 USERTrustRSAAddTrustCA.pem
-r-------- 1 root root  424 Jan 22 13:15 dhparam.pem
-rw------- 1 root root 4.0K Jan 22 14:48 gandi.pem
-rw------- 1 root root 5.8K Jan 22 14:50 transitionnetwork.org.chained.pem
-rw------- 1 root root 1.8K Jan 22 14:28 transitionnetwork.org.crt
-rw------- 1 root root 1.1K Jan 22 12:25 transitionnetwork.org.csr
-rw------- 1 root root 1.7K Jan 22 12:25 transitionnetwork.org.key
rm projects.parrot.webarch.net-root.pem ; ln -s ../transitionnetwork.org/gandi.pem projects.parrot.webarch.net-root.pem
rm projects.parrot.webarch.net-cert.pem ; ln -s ../transitionnetwork.org/transitionnetwork.org.crt projects.parrot.webarch.net-cert.pem
rm projects.parrot.webarch.net-key.pem ; ln -s ../transitionnetwork.org/transitionnetwork.org.key projects.parrot.webarch.net-key.pem
apache2ctl configtest
Syntax OK
apache2ctl restart

So once the DNS servers you use have updated from Gandi.net this should start working:

https://projects.transitionnetwork.org/

And the TLS setup looks good (A):

https://www.ssllabs.com/ssltest/analyze.html?d=projects.transitionnetwork.org&latest

Ade -- please add a comment if you have any questions / problems.

status changed; resolution set

ade — Thu, 19 Feb 2015 16:12:59 GMT

status changed from accepted to closed
resolution set to fixed