In the wake of the recent openssl vulnerability, we have now reissued
all the public facing SSL certificates used by the Fedora Project, as
well as a number of internal only ones.
*.fedoraproject.org (wildcard certificate)
*.fedorahosted.org (wildcard certificate)
*.id.fedoraproject.org (wildcard certificate)
*.stg.fedoraproject.org (wildcard certificate)
Internally we have completely re-keyed our puppet, openvpn, and fedmsg
certs as a precaution.
If you were holding off changing your Fedora Account System password
until new certs were issued, feel free to do so now.
As always, Fedora account system account holders are encouraged to
notify admin(a)fedoraproject.org if they see any out of the ordinary
activity on their accounts (changes to Fedora accounts generate email
to the account holder). If you see a change you didn't initiate, please
let us know.
Thanks for your patience,