<div><div dir="auto">I renewed the certificates and that resulted in this domain verification. The timing of it alone makes me feel pretty comfortable that this is legit. </div><div dir="auto"><br></div><div dir="auto">I did not submit new CSR though, and this step does feel new to me. Looking at the change log of our zone file I don’t think we’ve done stuff like this in the past. </div><br><div class="gmail_quote"><div>On Thu, Nov 16, 2017 at 3:39 AM R. Tyler Croy <<a href="mailto:tyler@monkeypox.org">tyler@monkeypox.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">(replies inline)<br>
<br>
On Wed, 15 Nov 2017, Olblak wrote:<br>
<br>
> It's easier to do 'Domain Zone Control validation process'.<br>
> For that we need to add specific dns Text records to the jenkins-<br>
> <a href="http://ci.org" rel="noreferrer" target="_blank">ci.org</a> zone.I think godaddy send the record that need to be configured by email.<br>
> I can update the zone, if you give me those instruction (in<br>
> private message).<br>
<br>
<br>
Whoa whoa whoa here. If neither of you initiated a CSR then don't go and do<br>
anything.<br>
<br>
Kohsuke do you have any information on where this CSR actually game from? I'll<br>
be online later today if you want to jump on a Hangout to discuss.<br>
<br>
<br>
<br>
<br>
><br>
> On Wed, Nov 15, 2017, at 02:32 AM, Kohsuke Kawaguchi wrote:<br>
> > This is new to me. Any help on how to proceed?<br>
> ><br>
> > ---------- Forwarded message ---------<br>
> > From: Secure Certificate Services <<a href="mailto:donotreply@godaddy.com" target="_blank">donotreply@godaddy.com</a>><br>
> > Date: Wed, Nov 15, 2017 at 10:18 AM<br>
> > Subject: Domain Control Verification Is Required<br>
> > To: <<a href="mailto:kk@kohsuke.org" target="_blank">kk@kohsuke.org</a>><br>
> ><br>
> ><br>
> > Dear Secure Certificate Customer,<br>
> ><br>
> > We have received a Certificate Signing Request for the following<br>
> > domain(s): <a href="http://ci.jenkins-ci.org" rel="noreferrer" target="_blank">ci.jenkins-ci.org</a> <a href="http://jenkins-ci.org" rel="noreferrer" target="_blank">jenkins-ci.org</a> <a href="http://svn.jenkins-ci.org" rel="noreferrer" target="_blank">svn.jenkins-ci.org</a> updates.jenkins-<br>
> > <a href="http://ci.org" rel="noreferrer" target="_blank">ci.org</a> <a href="http://usage.jenkins-ci.org" rel="noreferrer" target="_blank">usage.jenkins-ci.org</a><br>
> ><br>
> > Please use one of the following alternative methods to facilitate the<br>
> > validation of your domain access control. Your unique ID for these<br>
> > methods is <<redacted>>, which will expire on 12/14/17.<br>
> ><br>
> > 1. If you are able to make Domain Name Zone changes, you can use the<br>
> > Domain Zone Control validation process.<br>
> > 2. If you are able to store a web page in the highest-level directory<br>
> > of the website for the common name you're using, you can use the<br>
> > Domain Website Control validation process. Please note this<br>
> > option is not available for Wildcard SSL. After you have followed<br>
> > the instructions linked below, you should be able to view the file<br>
> > using the following URL(s):<br>
> ><br>
> > <a href="http://ci.jenkins-ci.org/.well-known/pki-validation/godaddy.html" rel="noreferrer" target="_blank">http://ci.jenkins-ci.org/.well-known/pki-validation/godaddy.html</a><br>
> > <a href="http://jenkins-ci.org/.well-known/pki-validation/godaddy.html" rel="noreferrer" target="_blank">http://jenkins-ci.org/.well-known/pki-validation/godaddy.html</a><br>
> > <a href="http://svn.jenkins-ci.org/.well-known/pki-validation/godaddy.html" rel="noreferrer" target="_blank">http://svn.jenkins-ci.org/.well-known/pki-validation/godaddy.html</a><br>
> > <a href="http://updates.jenkins-ci.org/.well-known/pki-validation/godaddy.html" rel="noreferrer" target="_blank">http://updates.jenkins-ci.org/.well-known/pki-validation/godaddy.html</a><br>
> > <a href="http://usage.jenkins-ci.org/.well-known/pki-validation/godaddy.html" rel="noreferrer" target="_blank">http://usage.jenkins-ci.org/.well-known/pki-validation/godaddy.html</a><br>
> ><br>
> ><br>
> ><br>
> > Domain Access Control Instructions[1]<br>
> ><br>
> > When you've made the updates and are ready to verify your domain,<br>
> > click the link below: <<redacted>><br>
> ><br>
> > If you have any trouble or questions, contact us and let us know. We<br>
> > are available to help around-the-clock, seven days a week.<br>
> ><br>
> > Customer Support: Phone: 480.463.8887[2]<br>
> ><br>
> ><br>
> > For further information, log in to your account at<br>
> > <a href="https://certs.godaddy.com" rel="noreferrer" target="_blank">https://certs.godaddy.com</a>.> --<br>
> > Kohsuke Kawaguchi<br>
> > _________________________________________________<br>
> > Jenkins-infra mailing list<br>
> > <a href="mailto:Jenkins-infra@lists.jenkins-ci.org" target="_blank">Jenkins-infra@lists.jenkins-ci.org</a><br>
> > <a href="http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra" rel="noreferrer" target="_blank">http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra</a><br>
><br>
><br>
> Links:<br>
><br>
> 1. <a href="http://support.godaddy.com/help/7452" rel="noreferrer" target="_blank">http://support.godaddy.com/help/7452</a><br>
> 2. tel:(480)%20463-8887<br>
<br>
> _______________________________________________<br>
> Jenkins-infra mailing list<br>
> <a href="mailto:Jenkins-infra@lists.jenkins-ci.org" target="_blank">Jenkins-infra@lists.jenkins-ci.org</a><br>
> <a href="http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra" rel="noreferrer" target="_blank">http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra</a><br>
<br>
<br>
- R. Tyler Croy<br>
<br>
------------------------------------------------------<br>
Code: <<a href="https://github.com/rtyler" rel="noreferrer" target="_blank">https://github.com/rtyler</a>><br>
Chatter: <<a href="https://twitter.com/agentdero" rel="noreferrer" target="_blank">https://twitter.com/agentdero</a>><br>
xmpp: <a href="mailto:rtyler@jabber.org" target="_blank">rtyler@jabber.org</a><br>
<br>
% gpg --keyserver <a href="http://keys.gnupg.net" rel="noreferrer" target="_blank">keys.gnupg.net</a> --recv-key 1426C7DC3F51E16F<br>
------------------------------------------------------<br>
_______________________________________________<br>
Jenkins-infra mailing list<br>
<a href="mailto:Jenkins-infra@lists.jenkins-ci.org" target="_blank">Jenkins-infra@lists.jenkins-ci.org</a><br>
<a href="http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra" rel="noreferrer" target="_blank">http://lists.jenkins-ci.org/mailman/listinfo/jenkins-infra</a><br>
</blockquote></div></div><div dir="ltr">-- <br></div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Kohsuke Kawaguchi</div></div></div>