Bug 41686 - Сломана обработка/перенаправление дополнительных доменов bugzilla
Summary: Сломана обработка/перенаправление дополнительных доменов bugzilla
Status: CLOSED FIXED
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: bugzilla.altlinux.org (show other bugs)
Version: unspecified
Hardware: all Linux
: P5 normal
Assignee: Alexey Shabalin
QA Contact: Andrey Cherepanov
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-01-10 19:11 MSK by Gleb F-Malinovskiy
Modified: 2022-01-10 22:49 MSK (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Gleb F-Malinovskiy 2022-01-10 19:11:22 MSK
for d in DNS:bugzilla.altlinux.org DNS:attachments.bugzilla.altlinux.org DNS:bugzilla.altlinux.com DNS:bugzilla.altlinux.ru DNS:bugs.altlinux.org DNS:bugs.altlinux.ru; do echo "==== ${d#DNS:} ===="; curl -I "https://${d#DNS:}"; done
==== bugzilla.altlinux.org ====
HTTP/2 200 
content-type: text/html; charset=UTF-8
date: Mon, 10 Jan 2022 16:09:27 GMT
server: Apache/2.4.51 (Unix) mod_perl/2.0.12-dev Perl/v5.34.0
set-cookie: Bugzilla_login_request_cookie=F0Hgc4AxkZ; path=/; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block

==== attachments.bugzilla.altlinux.org ====
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
==== bugzilla.altlinux.com ====
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
==== bugzilla.altlinux.ru ====
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
==== bugs.altlinux.org ====
HTTP/2 200 
content-type: text/html; charset=UTF-8
date: Mon, 10 Jan 2022 16:09:28 GMT
server: Apache/2.4.51 (Unix) mod_perl/2.0.12-dev Perl/v5.34.0
set-cookie: Bugzilla_login_request_cookie=AwrAiYfyM3; path=/; HttpOnly
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block

==== bugs.altlinux.ru ====
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.


Т.е. сломались attachments.bugzilla.altlinux.org, bugzilla.altlinux.com, bugzilla.altlinux.ru, bugs.altlinux.ru.
Comment 1 Andrew Vasilyev 2022-01-10 19:26:47 MSK
  А ещё:

$ host bugzilla.altlinux.ru
bugzilla.altlinux.ru has address 194.107.17.16
bugzilla.altlinux.ru is an alias for bugzilla.altlinux.org.
bugzilla.altlinux.org is an alias for mskdc-bal.altlinux.org.
bugzilla.altlinux.ru is an alias for bugzilla.altlinux.org.
bugzilla.altlinux.org is an alias for mskdc-bal.altlinux.org.


  Т.е. одновременно есть A-запись и два CNAME? "Не делайте так" (c)ldv
  И A-запись не соответствует A-записи bugzilla.a.org
Comment 2 Andrew Vasilyev 2022-01-10 19:30:03 MSK
  Т.е. сначала надо исправить все записи в DNS, сделав A-записи на 194.107.17.249
  после чего перевесить тикет на shaba@.
Comment 3 Andrew Vasilyev 2022-01-10 20:12:50 MSK
DNS исправлен
Comment 4 Alexey Shabalin 2022-01-10 20:19:26 MSK
Добавил отсутствующие домены.
В следующий раз присылайте точно что делать. Доступа к dns серверам у меня нет.
Comment 5 Dmitry V. Levin 2022-01-10 22:49:32 MSK
(In reply to Andrew Vasilyev from comment #3)
> DNS исправлен

DNS и не был сломан.

На будущее при переносе ресурсов смотрите, что было в прежних сертификатах.