openSUSE admin

Judging by /etc/ssl/services on anna, we have wildcard certs for opensuse.de and opensuse.fr, but they are not actually being used?

Just a thought - before we go and generate LE certs for all of these, maybe we should think about what they are being used for - I didn't check them all, but opensuse.mx, opensuse.de, www.opensuse.mx, www.opensuse.de, lists.opensuse.de and even perjessen.opensuse.de all redirect to download.o.o ? :-)
Another question is, why is it only this small subset of all country-specific TLDs ? I don't see 'opensuse.ch' or 'opensuse.org.uk' or 'opensuse.ee', for instance.

pjessen wrote:

Just a thought - before we go and generate LE certs for all of these, maybe we should think about what they are being used for - I didn't check them all, but opensuse.mx, opensuse.de, www.opensuse.mx, www.opensuse.de, lists.opensuse.de and even perjessen.opensuse.de all redirect to download.o.o ? :-)

Sorry, not a redirect, it just shows download.o.o under whatever name you use.

I would have expected https://www.opensuse.de/ to redirect to the German version of https://www.opensuse.org/ , so maybe we need to update the haproxy.cfg on anna as well.

http://web.archive.org/web/20190902222326/https://www.opensuse.de/ shows 2y ago it was a 301 to https://www.opensuse.org/

FYI, I have added an SPF record for all of those unused domains v=spf1 -all

I think the issue is no longer present:

$ echo|openssl s_client -connect opensuse.com.br:443 2>/dev/null | openssl x509 -noout -text -in -|grep DNS
                DNS:*.opensuse.com.br, DNS:opensuse.com.br

Can this ticket be closed?