mozilla :: #moc

19 Mar 2017
00:02justdavedoes the pingdom check actually check it against OCSP?
00:02justdavethat's the only way it would have caught it
00:03justdaveusually those kind of things only check the signature is trusted, they don't look at the CRLs
00:06unixfairyI am guessing not and thank you for letting us know justdave
00:06unixfairyjustdave++
00:07saljustdave: it does not :( will need to modify this or get something else going.
00:07unixfairyit will be part of the action items in the RCA sal
00:07unixfairyspeaking of which ...
00:07unixfairysorry man
00:07saljustdave: works on safari btw
00:07unixfairythis week
00:07salyea been working ot it
00:07salthis week lol
00:16justdavesafari probably caches CRLs and updates them periodically
00:16justdaveand hasn't pulled a new CRL since the revocation happened
00:17w0ts0nresolved about 5m ago.
00:19unixfairyyup resolution notice out
01:00nagios-scl3New Sysadmin OnDuty is ashlee
06:02koheican someone take a look at bug 1348619? luckily its Saturday night in U.S. but various sites are not accessible now (and none of them are showing up at status.mozilla.org)
06:02firebothttps://bugzil.la/1348619 NEW, server-ops-webops@mozilla-org.bugs SEC_ERROR_REVOKED_CERTIFICATE on various blogs including Mozilla Hacks
06:05koheiashlee: ^^
06:05ashleekohei: hi
06:08ashleekohei: so something similar to this happened earlier to blogs.mo. Let me see what I can do.
06:09koheiashlee: thanks!
06:17ashleekohei: are you unable to reach the sites in comment 2?
06:17koheiashlee: yes, will Firefox, all the sites lead to Secure Connection Failed
06:20koheiwith Chrome and Safari, some lead to the error
06:20koheinot all, somehow
06:28ashleekohei: Still working on escalating
07:12atollkohei: did they forget the intermediate?
07:13atolloncall hi
07:13ashleeatoll: hi
07:13ashleethe right people have been notified and are working on it now
07:13atollokay
07:14koheiatoll: I see the DigiCert SHA2 Secure Server CA intermediate (with Chrome)
07:14atollok, that's something at least
07:14unixfairyatoll we have fox2mike
07:14unixfairythanks though
07:14* atoll nods
07:14atollbe well, I'm around an hour if essential
07:14atollthank you kohei for checking
07:18koheithanks guys, Im going to bed now
07:21ashleethanks for notifying us kohei
07:21koheiashlee: my pleasure :)
09:00nagios-scl3New Sysadmin OnDuty is daveio
11:17nlidaveio: https://bugzilla.mozilla.org/show_bug.cgi?id=1333891 completed recycling power, check Vidyo, network. All good. Heading home. Please let us know if you see any unusual at TPE site. Thank you very much.
11:17firebotBug 1333891 is not accessible
11:17daveionli: the canary needs restarting
11:18daveionli: should be a mac mini, it doesn't power itself back on - just needs the power button hitting
11:19nli5 mins.
11:20daveionli: ty :)
11:21nliSorry to leave it behind. :P updated my check list. ;)
11:23nlidaveio: It's on. Could you confirm?
11:24daveionli: showing as up and running, all good. thanks!
11:24nlidaveio: Thank you. Have a nice day.
17:00nagios-scl3New Sysadmin OnDuty is sal
20 Mar 2017
No messages
   
Last message: 123 days and 16 hours ago