Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x/build: update the version of x/crypto in order to resolve Let's Encrypt certificate revocation #50880

Closed
cagedmantis opened this issue Jan 28, 2022 · 2 comments
Labels
Builders x/build issues (builders, bots, dashboards) FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done. Soon This needs action soon. (recent regressions, service outages, unusual time-sensitive situations)
Milestone

Comments

@cagedmantis
Copy link
Contributor

cagedmantis commented Jan 28, 2022

Let's Encrypt is revoking a set of certificates as described in: Most certificates managed by autocert require manual renewal.

This related domains impacted by this are:
farmer.golang.org
vcs-test.golang.org
pubsubhelper.golang.org

We should update x/crypto in the x/build repository and deploy the impacted services in order to mitigate this.

cc @golang/release

@cagedmantis cagedmantis added Builders x/build issues (builders, bots, dashboards) NeedsFix The path to resolution is known, but the work has not been done. labels Jan 28, 2022
@cagedmantis cagedmantis added this to the Backlog milestone Jan 28, 2022
@cagedmantis cagedmantis self-assigned this Jan 28, 2022
@dmitshur dmitshur added the Soon This needs action soon. (recent regressions, service outages, unusual time-sensitive situations) label Jan 28, 2022
@dmitshur dmitshur modified the milestones: Backlog, Unreleased Jan 28, 2022
@gopherbot
Copy link
Contributor

Change https://golang.org/cl/381735 mentions this issue: all: update the version of x/crypto

gopherbot pushed a commit to golang/build that referenced this issue Jan 28, 2022
This updates the version of x/crypto in order to mitigate the
revokation of Let's Encrypt certificates.

Updates golang/go#50880

Change-Id: I6c8004ebbcc4f51395242ac46f930a93588d0f09
Reviewed-on: https://go-review.googlesource.com/c/build/+/381735
Trust: Carlos Amedee <carlos@golang.org>
Run-TryBot: Carlos Amedee <carlos@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
@cagedmantis
Copy link
Contributor Author

Re have resolved this by updating x/crypto in the build repository and redeploying the impacted services. We've also checked our list of golang.org subdomains any additional subdomains which may have been impacted.

@heschi heschi moved this to Done in Go Release Sep 27, 2022
@golang golang locked and limited conversation to collaborators Jun 22, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Builders x/build issues (builders, bots, dashboards) FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done. Soon This needs action soon. (recent regressions, service outages, unusual time-sensitive situations)
Projects
Archived in project
Development

No branches or pull requests

3 participants