Project

Profile

Help

Task #2800

Updated by bmbouter almost 7 years ago

In order to not have SSL break, we need to regenerate and redeploy our certs to docs.pulpproject.org before July 22, 2017. June 17, 2018. 

 The provider we used last time (startssl) has issues with the chain of trust on some browsers (Chrome). This time we should use the well-adopted letsencrypt service instead which will resolve that other issue also. 

 Lastly, rather than doing this manually we should have Jenkins auto-regenerate and auto-rotate the SSL certs as well. This is important when using letsencrypt because they only issue certs that are valid for 90 days max and they recommend renewing every 60 days.

Back