Networking/TLSCerts: Difference between revisions
From London Hackspace Wiki
(no more startcom :)) |
m (london.hackspace.org.uk is now using LetEncrypt for its SSL certificate - updating note.) |
||
Line 11: | Line 11: | ||
| [[Turing]] || LDAP || same cert as above || " || " || " || used by the LDAP replica on [[denning]] | | [[Turing]] || LDAP || same cert as above || " || " || " || used by the LDAP replica on [[denning]] | ||
|- | |- | ||
| [[Turing]] || main website || london.hackspace.org.uk ||london.hackspace.org.uk || | | [[Turing]] || main website || london.hackspace.org.uk ||london.hackspace.org.uk || " || " || | ||
|- | |- | ||
| [[Knuth]] || wiki || wiki.london.hackspace.org.uk || wiki.london.hackspace.org.uk || Lets Encrypt || Auto Renew || | | [[Knuth]] || wiki || wiki.london.hackspace.org.uk || wiki.london.hackspace.org.uk || Lets Encrypt || Auto Renew || |
Revision as of 22:18, 24 July 2018
TLS Certificates
This page lists our certificates, where they are, what they are for, who issued them, and when they expire
Host | Service | CN | SubjectAltnames | Issuer | Expirey | notes |
---|---|---|---|---|---|---|
Turing | SMTP | turing.hackspace.org.uk | turing.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | turing is the mx for london.hackspace.org.uk, hackspace.org.uk and m0hsl.org |
Turing | LDAP | same cert as above | " | " | " | used by the LDAP replica on denning |
Turing | main website | london.hackspace.org.uk | london.hackspace.org.uk | " | " | |
Knuth | wiki | wiki.london.hackspace.org.uk | wiki.london.hackspace.org.uk | Lets Encrypt | Auto Renew | |
Denning | ldap | ldap.lan.london.hackspace.org.uk | ldap.lan.london.hackspace.org.uk | Lets Encrypt | Auto renew?!?! | Read only replica of the DB on turing, clients verify the cert. ansible-simp_le dosen't work on wheezy. |
adminstuff | redmine | adminstuff.london.hackspace.org.uk | adminstuff.london.hackspace.org.uk,bugs.london.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | |
adminstuff | apache2 | same cert as above | " | " | " | |
adminstuff | freeradius | spacefed.london.hackspace.org.uk | spacefed.london.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully | Used for spacefed, the clients need to be able to verify the cert. |
ACServer | apache2 | acserver.london.hackspace.org.uk | acserver.london.hackspace.org.uk | " | " | Used for the acserver website. |
Chomsky | apache2 | chomsky.hack.rs | chomsky.hack.rs, chomsky.london.hackspace.org.uk, chomsky.london.hackspace.org.uk | Lets Encrypt | Auto Renew, hopefully |