[SAC] [OSGeo] #2312: Update key for deploying docs to geotools.org

#2312: Update key for deploying docs to geotools.org
---------------------------+----------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords: geotools
---------------------------+----------------------
The Jenkins CI server for the GeoTools project (build.geoserver.org)
recently experienced a security breach.
As such, we have rebuilt the server and regenerated all keys. One of these
was the key used to upload documentation to docs.geotools.org

As per #1931, OSGeo controls the geotools.org domain.

We need someone to remove the previous key and add the new one we have
generated.
I am not quite sure what the security configuration looks like on
docs.geotools.org; besides the publickey, do you need anything else from
us, or is there any other configuration required on our end?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2312: Update key for deploying docs to geotools.org
---------------------------+--------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: geotools |
---------------------------+--------------------

Comment (by robe):

jody can you send me the keys that need replacing. on the geotools home
folder osge osgeo6 (where geotools is installed) I see both public and
private keys. Not sure what the private key is for.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2312: Update key for deploying docs to geotools.org
---------------------------+--------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: geotools |
---------------------------+--------------------

Comment (by robe):

FYI in the authorized_keys I see a key for jenkins@build-
slave-01.geoserver.org

if you aren't using osgeo6 to further deploy to any other server, I
suspect we can delete the private key

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2312: Update key for deploying docs to geotools.org
---------------------------+--------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: geotools |
---------------------------+--------------------

Comment (by robe):

tbarsballe you can send me the keys via lr@pcorp.us and I'll take care of
it.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2312: Update key for deploying docs to geotools.org
---------------------------+--------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: geotools |
---------------------------+--------------------

Comment (by robe):

Got the public key from tbarsballe and removed the old one and installed
this new one.

Also got rid of the private key because Torben said to his knowledge it is
not used

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312#comment:4&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2312: Update key for deploying docs to geotools.org
---------------------------+---------------------------------------
Reporter: tbarsballe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2019-I
Component: Systems Admin | Resolution: fixed
Keywords: geotools |
---------------------------+---------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed
* milestone: => Sysadmin Contract 2019-I

Comment:

I'm closing this out - feel free to reopen if there is an issue

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2312#comment:5&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.