Networking/TLSCerts: Difference between revisions
From London Hackspace Wiki
(forgot acserver had a cert.) |
(updated with new certs from lets-encrypt) |
||
| Line 7: | Line 7: | ||
! Host !! Service !! CN !! SubjectAltnames !! Issuer !! Expirey !! notes | ! Host !! Service !! CN !! SubjectAltnames !! Issuer !! Expirey !! notes | ||
|- | |- | ||
| [[Turing]] || SMTP || turing.hackspace.org.uk || turing. | | [[Turing]] || SMTP || turing.hackspace.org.uk || turing.hackspace.org.uk || Lets Encrypt || Auto Renew, hopefully || turing is the mx for london.hackspace.org.uk, hackspace.org.uk and m0hsl.org | ||
|- | |- | ||
| [[Turing]] || LDAP || same cert as above || " || " || " || used by the LDAP replica on [[denning]] | | [[Turing]] || LDAP || same cert as above || " || " || " || used by the LDAP replica on [[denning]] | ||
| Line 13: | Line 13: | ||
| [[Turing]] || main website || london.hackspace.org.uk ||london.hackspace.org.uk || Geotrust || 17/11/17 || | | [[Turing]] || main website || london.hackspace.org.uk ||london.hackspace.org.uk || Geotrust || 17/11/17 || | ||
|- | |- | ||
| [[Knuth]] || wiki || wiki.london.hackspace.org.uk || wiki.london.hackspace.org.uk || Lets Encrypt || | | [[Knuth]] || wiki || wiki.london.hackspace.org.uk || wiki.london.hackspace.org.uk || Lets Encrypt || Auto Renew || | ||
|- | |- | ||
| [[Denning]] || ldap || ldap.lan.london.hackspace.org.uk || ldap.lan.london.hackspace.org.uk, hackspace.org.uk || Startcom || Sep 20 23:31:11 2016 GMT || Read only replica of the DB on turing, clients verify the cert. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. | | [[Denning]] || ldap || ldap.lan.london.hackspace.org.uk || ldap.lan.london.hackspace.org.uk, hackspace.org.uk || Startcom || Sep 20 23:31:11 2016 GMT || Read only replica of the DB on turing, clients verify the cert. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. | ||
|- | |- | ||
| [[adminstuff]] || redmine || | | [[adminstuff]] || redmine || adminstuff.london.hackspace.org.uk || adminstuff.london.hackspace.org.uk,bugs.london.hackspace.org.uk || Lets Encrypt || Auto Renew, hopefully || | ||
|- | |- | ||
| [[adminstuff]] || apache2 || | | [[adminstuff]] || apache2 || same cert as above || " || " || " || | ||
|- | |- | ||
| [[adminstuff]] || freeradius || spacefed.london.hackspace.org.uk || spacefed.london. | | [[adminstuff]] || freeradius || spacefed.london.hackspace.org.uk || spacefed.london.hackspace.org.uk || Lets Encrypt || Auto Renew, hopefully || Used for spacefed, the clients need to be able to verify the cert. | ||
|- | |- | ||
| [[Lamarr#ACServer|ACServer]] || apache2 || acserver.london.hackspace.org.uk || acserver.london.hackspace.org.uk, hackspace.org.uk || StartCom || 30/10/16 || Used for the acserver website. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. | | [[Lamarr#ACServer|ACServer]] || apache2 || acserver.london.hackspace.org.uk || acserver.london.hackspace.org.uk, hackspace.org.uk || StartCom || 30/10/16 || Used for the acserver website. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. | ||
|} | |} | ||
Revision as of 00:25, 12 May 2016
TLS Certificates
This page lists our certificates, where they are, what they are for, who issued them, and when they expire
| Host | Service | CN | SubjectAltnames | Issuer | Expirey | notes |
|---|---|---|---|---|---|---|
| Turing | SMTP | turing.hackspace.org.uk | turing.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | turing is the mx for london.hackspace.org.uk, hackspace.org.uk and m0hsl.org |
| Turing | LDAP | same cert as above | " | " | " | used by the LDAP replica on denning |
| Turing | main website | london.hackspace.org.uk | london.hackspace.org.uk | Geotrust | 17/11/17 | |
| Knuth | wiki | wiki.london.hackspace.org.uk | wiki.london.hackspace.org.uk | Lets Encrypt | Auto Renew | |
| Denning | ldap | ldap.lan.london.hackspace.org.uk | ldap.lan.london.hackspace.org.uk, hackspace.org.uk | Startcom | Sep 20 23:31:11 2016 GMT | Read only replica of the DB on turing, clients verify the cert. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. |
| adminstuff | redmine | adminstuff.london.hackspace.org.uk | adminstuff.london.hackspace.org.uk,bugs.london.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | |
| adminstuff | apache2 | same cert as above | " | " | " | |
| adminstuff | freeradius | spacefed.london.hackspace.org.uk | spacefed.london.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | Used for spacefed, the clients need to be able to verify the cert. |
| ACServer | apache2 | acserver.london.hackspace.org.uk | acserver.london.hackspace.org.uk, hackspace.org.uk | StartCom | 30/10/16 | Used for the acserver website. The hackspace.org.uk altname is an artefact of the way StartCom works and is not wanted. |
