[11:58:06] vgutierrez, hey [11:58:36] several people have asked me what things we still need to do before we actually serve the acme-chief unified cert to clients [11:58:57] technically is all ready AFAIK [11:59:11] oh [11:59:13] okay [11:59:55] it is actually deployed in the cache cluster.. as soon as we decide to switch, it would work [12:00:17] so [12:00:17] dunno if b.black can give some insights about timings for that [12:00:32] but yeah, it isn't a technical issue right now [12:00:41] oh right it's sunday and he's not at wikimania [12:00:43] sorry [12:01:57] and I guess that we want to keep at least two CAs issuing the unified cert [12:02:34] 10Acme-chief, 10Traffic, 10Operations: Provide the three cert types (chain-only, cert only and chained) as soon as we get the certificate issued - https://phabricator.wikimedia.org/T229096 (10Krenair) Can we close this now? [12:02:59] 10Acme-chief, 10Traffic, 10Operations: acme-chief staging time not working as expected - https://phabricator.wikimedia.org/T225945 (10Krenair) Is it working as expected now? [12:33:20] 10Acme-chief, 10Patch-For-Review: Check for expired/outdated certs in the main loop - https://phabricator.wikimedia.org/T207374 (10Krenair) 05Open→03Invalid I think Valentin did this last year [12:36:18] 10Acme-chief, 10Patch-For-Review: Check for expired/outdated certs in the main loop - https://phabricator.wikimedia.org/T207374 (10Krenair) 05Invalid→03Open Oh actually maybe not - sighup_handler (and nothing else) runs _set_cert_status that will trigger the NEEDS_RENEWAL status for the main loop to pick u... [12:47:13] 10Acme-chief, 10Traffic, 10Operations: Decide/document criteria needed to serve acme-chief LE issued unified certificate to end users - https://phabricator.wikimedia.org/T230687 (10Krenair)