Re: Upcoming hg.mozilla.org certificate change

2016-09-26 Thread Gregory Szorc
Yup. There are a few outstanding issues in automation. People in #releng are on it. On Mon, Sep 26, 2016 at 11:22 AM, Justin D'Arcangelo < jdarcang...@mozilla.com> wrote: > Looks like the cert change broke try: > > https://treeherder.mozilla.org/#/jobs?repo=try&revision=a83c34bc2716 < > https://t

Re: Upcoming hg.mozilla.org certificate change

2016-09-26 Thread Justin D'Arcangelo
Looks like the cert change broke try: https://treeherder.mozilla.org/#/jobs?repo=try&revision=a83c34bc2716 -Justin > On Sep 26, 2016, at 2:11 PM, Mats Palmgren wrote: > > On 09/26/2016 07:20 PM, Gregory Szorc wrote: >> #

Re: Upcoming hg.mozilla.org certificate change

2016-09-26 Thread Mats Palmgren
On 09/26/2016 07:20 PM, Gregory Szorc wrote: # Mercurial 3.9+ [hostsecurity] hg.mozilla.org:fingerprints = sha256:8e:ad:f7:6a:eb:44:06:15:ed:f3:e4:69:a6:64:60:37:2d:ff:98:88:37:bf:d7:b8:40:84:01:48:9c:26:ce:d9 # Mercurial <= 3.8 [hostfingerprints]hg.mozilla.org = 73:7f:ef:ab:68:0f:49:3f:88:91:

Re: Upcoming hg.mozilla.org certificate change

2016-09-26 Thread Gregory Szorc
The certificate has been flipped. New hashes are: sha1:73:7f:ef:ab:68:0f:49:3f:88:91:f0:b7:06:69:fd:8f:f2:55:c9:56 sha256:8e:ad:f7:6a:eb:44:06:15:ed:f3:e4:69:a6:64:60:37:2d:ff:98:88:37:bf:d7:b8:40:84:01:48:9c:26:ce:d9 You can pin these in your hgrc via: # Mercurial 3.9+ [hostsecurity] hg.mozil

Upcoming hg.mozilla.org certificate change

2016-09-22 Thread Gregory Szorc
hg.mozilla.org's x509 server certificate (AKA an "SSL certificate") expires next week. A new certificate has already been issued and it is scheduled to be swapped in around 2016-09-26T17:00Z (Monday September 26 10:00 PDT). The transition may be delayed to avoid downtime in automation, which hasn'

hg.mozilla.org certificate change

2013-11-19 Thread Kendall Libby
The current certificate for https://hg.mozilla.org will expire soon. The new certificate will be installed on Thursday, Nov 21st at 0600PST(0900EST, 1400UTC). No interruption of service is expected, however anyone who has pinned the current certificate fingerprint in their Mercurial rc file wil