Project

General

Profile

Bug #8624

MNDeployment #6957: NRDC - Nevada Research Data Center

MN Certificate has expired

Added by Dave Vieglais over 6 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
-
Start date:
2018-06-18
Due date:
% Done:

100%

Story Points:

Description

The MN server certificate for the NRDC node has expired and needs to be updated.

This is a let's encrypt issued certificate so it may be that the cert has been renewed but the server has not been restarted to pick up the new certificate.

echo "Q" | openssl s_client -connect dataone.sensor.nevada.edu:443 | openssl x509 -text -noout

depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = dataone.sensor.nevada.edu
verify error:num=10:certificate has expired
notAfter=May 12 23:22:09 2018 GMT
verify return:1
depth=0 CN = dataone.sensor.nevada.edu
notAfter=May 12 23:22:09 2018 GMT
verify return:1
DONE
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:a2:3e:88:66:e4:e4:11:91:c5:5d:67:f6:36:68:0b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
        Validity
            Not Before: Feb 11 23:22:09 2018 GMT
            Not After : May 12 23:22:09 2018 GMT
        Subject: CN=dataone.sensor.nevada.edu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
...

History

#1 Updated by Mark Servilla over 6 years ago

An email has been sent to Hannah Munoz and Eric Fritzinger reporting this issue.

#2 Updated by Amy Forrester over 6 years ago

7/23/18: Connor Scully-Allison

I am taking over for Eric Fritizinger as the Sys Admin of the larger NRDC system, including our DataONE Member Node. Hannah Munoz, who has been your primary point of contact up until this point will be graduating and leaving us soon as well so I will become your primary point of contact in coordinating our efforts to get this node back online.

7/25/18: Mark
When I attempt to query the GMN member node (this date), i receive a 404 response from Apache. Need a call

#3 Updated by Amy Forrester over 6 years ago

7/30/18 reach out to Connor- propose Aug 8 meeting

#4 Updated by Mark Servilla over 6 years ago

  • % Done changed from 0 to 100
  • Status changed from New to Closed

The NRDC MN has been off line since mid-May 2018, at first due to an expired LetsEncrypt SSL certificate and then second for a configuration issue that led GMN to be inaccessible.

The first issue was resolved by manually reissuing the LetsEncrypt certificate. This action, however, inadvertently resulted in a second Apache SSL configuration to be generated, which over-road the gmn-ssl.conf configuration. Roger Dahl intervened on behalf of NRDC to correct this issue on Thursday 9 August 2018.

All NRDC systems appear to be up and operating as expected.

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)