Fedora Infrastructure SSL certificate changes for Openssl vulnerability (CVE-2014-0160/heartbleed)
kevin at scrye.com
Thu Apr 24 17:38:07 UTC 2014
In the wake of the recent openssl vulnerability, we have now reissued
all the public facing SSL certificates used by the Fedora Project, as
well as a number of internal only ones.
*.fedoraproject.org (wildcard certificate)
*.fedorahosted.org (wildcard certificate)
*.id.fedoraproject.org (wildcard certificate)
*.stg.fedoraproject.org (wildcard certificate)
Internally we have completely re-keyed our puppet, openvpn, and fedmsg
certs as a precaution.
If you were holding off changing your Fedora Account System password
until new certs were issued, feel free to do so now.
As always, Fedora account system account holders are encouraged to
notify admin at fedoraproject.org if they see any out of the ordinary
activity on their accounts (changes to Fedora accounts generate email
to the account holder). If you see a change you didn't initiate, please
let us know.
Thanks for your patience,
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 836 bytes
Desc: not available
More information about the announce