Bug 851792 - Shared SSL cert contains typo: "Organizational Unit: RHC Cloud Opoerations"
Summary: Shared SSL cert contains typo: "Organizational Unit: RHC Cloud Opoerations"
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: OKD
Classification: Red Hat
Component: Containers
Version: 2.x
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: ---
Assignee: Anderson Silva
QA Contact: libra bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-08-25 21:05 UTC by Nam Duong
Modified: 2015-05-14 22:58 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-08-29 18:12:37 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Nam Duong 2012-08-25 21:05:23 UTC
This is more for Ops, but couldn't find a more fitting Component

Description of problem: 
User reported this on mailing list.

There's a typo in the Shared SSL cert:
"Organizational Unit (OU):  RHC Cloud Opoerations"

Comment 1 Nam Duong 2012-08-25 21:07:20 UTC
User comments:
"I am not sure if it is a problem or if it can be safely ignored (from my experience only certain CAs do something about it) but I noticed that there is a small typo in the shared SSL certificate use on the app: simpleupload-dsage.rhcloud.com. Like I said before, it really depends on if GeoTrust truly cares about the small things but I thought I'd let you know just in case you didn't already"

Comment 2 Mike McGrath 2012-08-27 12:26:20 UTC
Re assigning to Anderson.  I suspect we'll just fix this one next time the cert exspires.

Comment 3 Anderson Silva 2012-08-27 13:34:40 UTC
First apologies on the typo... certainly a d'oh moment.

Talked to IT... here's the info:

<anderson> ping, question about certs... Someone noticed a misspell on the Organizational Unit in the certs we worked on for openshift... Is there a way to fix the misspelling for free? Can I cut you knew requests and update the cert? Basically, we are only interested in fixing the misspelling if it can be done  without us purchasing a new cert.
<walrus> we can revoke/replace
<walrus> for free
<walrus> it'll break the cert if the app is doing crl checking
<anderson> can an old one be revoked only after the new one has been issued and deployed?
<anderson> would all you need from me is a new csr?
<walrus> no
<walrus> revoke has to be done first
<anderson> and will it break the site as soon as the cert is revoked? or there a grace period?
<walrus> don't know, depends if apps are doing CRL checking
<anderson> I don't think we do crl checking (that I can remember)
<anderson> or is that on the browser side?
<walrus> browser side
<anderson> figures
<anderson> :-)
<walrus> they usually od it
<walrus> do it
<anderson> yeah, I could see that being good practice

I talked to mike, and at least for now, we are going to leave the cert as is.

Comment 4 Mike McGrath 2012-08-29 18:12:37 UTC
Lets just try to fix this next time it's about to expire.


Note You need to log in before you can comment on or make changes to this bug.