#10837 IPA CRL isn't available anymore on Staging env
Closed: Fixed 2 years ago by kevin. Opened 2 years ago by arrfab.

Describe what you would like us to do:


The public CRL from IPA Staging was available in the past (we even had ticket created for this in the past)
Now, when trying to retrieve it, it fails, as it's now sending a 301 but to an unreachable host (non public)

curl -l https://id.stg.fedoraproject.org/ipa/crl/MasterCRL.bin
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://ipa01.stg.iad2.fedoraproject.org/ipa/crl/MasterCRL.bin">here</a>.</p>
</body></html>

Can you restore the link so that the public Certificate Revokation List is usable again for services using TLS and consuming that CRL ?

When do you need this to be done by?


ASAP as it's actually impossible to modify a kojihub env for CentOS as it's trying to consume it :)


Metadata Update from @zlopez:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: Needs investigation

2 years ago

Fixed. Needed just a playbook run to fix the redirects.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Log in to comment on this ticket.

Metadata