This page contains information onSSL certificates for Toolforge.

For LE certificates, we useacme-chief.

There is currently 1 certificate in use.

• *.toolforge.org (also know asstar.toolforge.org) which also includes*.tools.wmflabs.org.

This certificate was introduced inT235252

This certificate is in use by Toolforge web proxies as well as the k8s master and docker registry, and is physically deployed in several servers:

• tools-proxy-*.tools.eqiad1.wikimedia.cloud
• tools-k8s-master-*.tools.eqiad1.wikimedia.cloud
• tools-docker-registry-*.tools.eqiad1.wikimedia.cloud

The private key is generated in theacme-chief servers (tools-acme-chief-*). These servers are responsible for requesting new certificates, renewal, etc. They contain credentials that can be used to make the DNS changes necessary to prove domain ownership.

Example URL using this SSL certificate:https://tools.wmflabs.org/

• Main Toolforge admin docs