[Jenkins-infra] Certificates renewal & expiration

[Olblak]

> One is a multi-domain certificate for issues.jenkins-ci.org and wiki.jenkins-ci.org. My understanding is that this certificate is no longer in use, so I'm going to let it expire.

Those two domains switched to Letsencrypt so you can definitely not renew them

> The other certificate is repo.jenkins-ci.org and this one still appears to be used. Should I renew this certificate? ($160 for 2 years)

Regarding repo.jenkins-ci.org, the main reasons why we didn't switch it to Letsencrypt was because of some older java versions not supported by Letsencrypt cfr <https://letsencrypt.org/docs/certificate-compatibility/> (Java 8 < 8u101 and Java 7 < 7u111)
While I don't have access to the number of those older java versions used, I doubt it's really high in our case
Since repo.jenkins-ci.org is a service provided by Jfrog, I can't really tell how easy it would be to switch to Letsencrypt certificate
Daniel should have more input on this.


---
gpg --keyserver keys.gnupg.net --recv-key 52210D3D
---


On Thu, Jan 2, 2020, at 5:26 PM, Kohsuke Kawaguchi wrote:
> I have two SSL certificates coming up for a renewal.
> 
> One is a multi-domain certificate for issues.jenkins-ci.org and wiki.jenkins-ci.org. My understanding is that this certificate is no longer in use, so I'm going to let it expire.
> 
> The other certificate is repo.jenkins-ci.org and this one still appears to be used. Should I renew this certificate? ($160 for 2 years)
> 
> It seems to me that we can save $160 by switching to Let's Encrypt, but whether that's worth it depends on the priority queue of the infra team.
> 
> One way or the other, let me know whether I should also let this one expire or renew. The current certificate expires in March 2nd.
> 
> -- 
> Kohsuke Kawaguchi
> _______________________________________________
> Jenkins-infra mailing list
> Jenkins-infra at lists.jenkins-ci.org
> http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.jenkins-ci.org/pipermail/jenkins-infra/attachments/20200103/d27f109b/attachment-0001.html>