Context Navigation

Timeline

3:54 AM Ticket #337 (sql.mit.edu should be bound on the directors) created by achernya: sql.mit.edu is a separate IP that is bound by the server that is the …
3:47 AM Ticket #336 (sql.mit.edu shouldn't mailbomb the maintainers when an outage occurs) created by achernya: Currently, sql.mit.edu's web interface, in addition to the sipb-noc …
3:39 AM Ticket #151 (look into mixed replication etc.) closed by achernya: fixed: As of today, sql.mit.edu runs in mixed-mode replication, the default …
3:36 AM Ticket #328 (Monitor used connections on sql.mit.edu) closed by quentin: fixed: Changes deployed. (Not sure why this is really necessary when we're …
12:18 AM Changeset [2359] by andersk: /etc/ntp.conf: Refresh from Fedora 17 This enables queries on ::1, fixing ntpq.

11:28 PM Changeset [2358] by andersk: /etc/named.conf: Add stub zones for mit.edu and 18.in-addr.arpa
11:12 PM Changeset [2357] by andersk: /etc/hosts: Add not-backward

1:58 PM Ticket #335 (test) closed by geofft: invalid
1:58 PM Ticket #335 (test) created by sipbcert
1:52 PM Ticket #334 (Can no longer access the site nor log into Wordpress) closed by geofft: invalid: Hi, Please send support requests to scripts@…, not to Trac.
1:50 PM Ticket #334 (Can no longer access the site nor log into Wordpress) created by zhangg: Hello, I was trying to implement the mit certificate control for my …

1:59 PM Ticket #333 (Pony should check that paths for hostname requests exist) created by achernya: Our current policy is to require a path exists before an MIT hostname …

11:54 PM Changeset [2355] by achernya: Certificate renewal for cs6090 and isawyou
11:53 PM Changeset [2354] by achernya: Update postfix for version 2.9.5

10:02 PM Ticket #332 (scripts-vhost IP mysteriously serves scripts.mit.edu cert with a ...) created by andersk: `openssl s_client -connect scripts-vhosts.mit.edu:443 -servername …
12:02 AM Changeset [2353] by achernya: Also add www.davidben.net

11:45 PM Changeset [2352] by achernya: Clean up other similarly affected certificate chains
11:26 PM Changeset [2351] by achernya: Remove InCommon Root CA from certificate chain MIT recently switched to the InCommon CA, rather than the MIT CA, which resulted in Scripts serving intermediate certificates. Unfortunately, the instructions from InCommon had the certificates in the incorrect order, and also included the Root CA. The Root CA is unnecessary for a server to be sending, so removing it reduces the SSL handshake size, as well as correcting the certificate order.
11:09 PM Changeset [2350] by achernya: Certificate and configuration for davidben.net

8:27 PM Changeset [2349] by adehnert: Minor corrections to networking/svn docs * lo:3 is consistent * refer to "realserver" rather than "host"
8:19 PM Changeset [2348] by adehnert: Add section on the interaction of network and svn We've talked about why the hostname for the svn repo is complicated repeatedly in the last few weeks, so document what makes it problematic and how to deal with it.
7:52 PM Ticket #331 (Fix mmr-hammer) created by adehnert: mmr-hammer is apparently wrong, and should possibly be fixed or …

1:57 AM Changeset [2347] by achernya: Certificate renewal for eastgate, picker, pickr

6:23 PM Changeset [2346] by achernya: Blacklist mount.nfs and netreport setuid binaries
6:04 PM Changeset [2345] by achernya: Certificate renewal for impact; new certificate for crush

1:24 AM Changeset [2344] by andersk: Disable mirrors for fedora.repo better.
1:17 AM Changeset [2343] by andersk: Disable mirrors for fedora.repo
1:16 AM Changeset [2342] by andersk: Import pristine upstream /etc/yum.repos.d/fedora.repo

10:35 PM Changeset [2341] by andersk: Add SSLCertificateChainFile to debathena.conf