SSL certificate expiries: Difference between revisions

From GigaTux Wiki
Jump to navigation Jump to search
Line 3: Line 3:
=*.gigatux.com=
=*.gigatux.com=


*Legion:
*Cassandra:
** /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.cert
** /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.cert
** /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.key
** /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.key
Line 11: Line 11:
** /var/lib/puppet/ssl/certs/cert.key
** /var/lib/puppet/ssl/certs/cert.key
** /var/lib/puppet/ssl/certs/cert.ca
** /var/lib/puppet/ssl/certs/cert.ca
*Legion and Psiren:
*Cassandra and Psiren:
** /etc/ssl/private/gigatux-wildcard-2017.pem
** /etc/ssl/private/gigatux-wildcard-2017.pem
** /etc/ssl/private/gigatux-wildcard-2017.key
** /etc/ssl/private/gigatux-wildcard-2017.key

Revision as of 21:35, 7 April 2017

When the SSL certificates expire, buy new ones and install them as follows:

*.gigatux.com

  • Cassandra:
    • /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.cert
    • /var/www/sites/cocodude/gigatux.com/subdomains/www/ssl/www.gigatux.com.cert.key
    • /var/lib/dtc/etc/ssl/new.cert.cert
    • /var/lib/dtc/etc/ssl/new.cert.key
    • /var/lib/puppet/ssl/certs/cert.crt
    • /var/lib/puppet/ssl/certs/cert.key
    • /var/lib/puppet/ssl/certs/cert.ca
  • Cassandra and Psiren:
    • /etc/ssl/private/gigatux-wildcard-2017.pem
    • /etc/ssl/private/gigatux-wildcard-2017.key
  • Billing site
  • All cPanel services
  • HyperVM
  • Ports: 995, 993, 143, 21, 110, 8140

Configuration files that might need updating:

  • /etc/dovecot/conf.d/10-ssl.conf
  • /etc/postfix/main.cf

*.vixile.com

  • Main website

*.vixile.net

  • All cPanel DNS services:
    • ns2.vixile.net
    • ns3.vixile.net

*.babblerabble.com

  • Jabber
  • Web site