Taskcluster/Update SSL Certificates: Difference between revisions

Jump to navigation Jump to search
Line 41: Line 41:
For CloudFront, you'll need AWS console access as well as access from the CLI.  To upload the new key (`tc.key`), cert (`tc.crt`), and `DigiCertCA.crt`, use
For CloudFront, you'll need AWS console access as well as access from the CLI.  To upload the new key (`tc.key`), cert (`tc.crt`), and `DigiCertCA.crt`, use


     aws iam upload-server-certificate --server-certificate-name taskcluster_net_bugABC123 --certificate-body file://tc.crt --private-key file://tc.key --certificate-chain file://DigiCertCA.crt --path /cloudfront/
     aws iam upload-server-certificate --server-certificate-name taskcluster_net_bugABC123 \
        --certificate-body file://tc.crt \
        --private-key file://tc.key \
        --certificate-chain file://DigiCertCA.crt \
        --path /cloudfront/


replacing the bug number as appropriate.  Once that's complete, login to https://console.aws.amazon.com/cloudfront/home?region=us-east-1 and edit each distribution that is using the old key to use the new key (identified with the bug number).
replacing the bug number as appropriate.  Once that's complete, login to https://console.aws.amazon.com/cloudfront/home?region=us-east-1 and edit each distribution that is using the old key to use the new key (identified with the bug number).
canmove, Confirmed users
1,394

edits

Navigation menu