Red Hat Bugzilla – Bug 851792
Shared SSL cert contains typo: "Organizational Unit: RHC Cloud Opoerations"
Last modified: 2015-05-14 18:58:39 EDT
This is more for Ops, but couldn't find a more fitting Component
Description of problem:
User reported this on mailing list.
There's a typo in the Shared SSL cert:
"Organizational Unit (OU): RHC Cloud Opoerations"
"I am not sure if it is a problem or if it can be safely ignored (from my experience only certain CAs do something about it) but I noticed that there is a small typo in the shared SSL certificate use on the app: simpleupload-dsage.rhcloud.com. Like I said before, it really depends on if GeoTrust truly cares about the small things but I thought I'd let you know just in case you didn't already"
Re assigning to Anderson. I suspect we'll just fix this one next time the cert exspires.
First apologies on the typo... certainly a d'oh moment.
Talked to IT... here's the info:
<anderson> ping, question about certs... Someone noticed a misspell on the Organizational Unit in the certs we worked on for openshift... Is there a way to fix the misspelling for free? Can I cut you knew requests and update the cert? Basically, we are only interested in fixing the misspelling if it can be done without us purchasing a new cert.
<walrus> we can revoke/replace
<walrus> for free
<walrus> it'll break the cert if the app is doing crl checking
<anderson> can an old one be revoked only after the new one has been issued and deployed?
<anderson> would all you need from me is a new csr?
<walrus> revoke has to be done first
<anderson> and will it break the site as soon as the cert is revoked? or there a grace period?
<walrus> don't know, depends if apps are doing CRL checking
<anderson> I don't think we do crl checking (that I can remember)
<anderson> or is that on the browser side?
<walrus> browser side
<walrus> they usually od it
<walrus> do it
<anderson> yeah, I could see that being good practice
I talked to mike, and at least for now, we are going to leave the cert as is.
Lets just try to fix this next time it's about to expire.