Update notes

content/post/2017-09.md

@@ -557,6 +557,24 @@ INFO  org.dspace.storage.rdbms.DatabaseManager @ Falling back to creating own Da
 - Start discussiong with ICT about Linode server update for DSpace Test
 - Rosemary said I need to work with Robert Okal to destroy/create the server, and then let her and Lilian Masigah from finance know the updated Linode asset names for their records
 
-## 2017-09-27
+## 2017-09-28
 
-- 
+- Tunji from the System Organization finally sent the DNS request for library.cgiar.org to CGNET
+- Now the redirects work
+- I quickly registered a Let's Encrypt certificate for the domain:
+
+```
+# systemctl stop nginx
+# /opt/certbot-auto certonly --standalone --email aorth@mjanja.ch -d library.cgiar.org
+# systemctl start nginx
+```
+
+- I modified the nginx configuration of the ansible playbooks to use this new certificate and now the certificate is enabled and OCSP stapling is working:
+
+```
+$ openssl s_client -connect cgspace.cgiar.org:443 -servername library.cgiar.org  -tls1_2 -tlsextdebug -status
+...
+OCSP Response Data:
+...
+Cert Status: good
+```

public/2017-09/index.html

@@ -61,7 +61,7 @@ Ask Sisay to clean up the WLE approvers a bit, as Marianne’s user account
   "@type": "BlogPosting",
   "headline": "September, 2017",
   "url": "https://alanorth.github.io/cgspace-notes/2017-09/",
-  "wordCount": "4112",
+  "wordCount": "4199",
   "datePublished": "2017-09-07T16:54:52+07:00",
   "dateModified": "2017-09-27T12:22:52+03:00",
   "author": {
@@ -753,12 +753,30 @@ INFO  org.dspace.storage.rdbms.DatabaseManager @ Falling back to creating own Da
 <li>Rosemary said I need to work with Robert Okal to destroy/create the server, and then let her and Lilian Masigah from finance know the updated Linode asset names for their records</li>
 </ul>
 
-<h2 id="2017-09-27">2017-09-27</h2>
+<h2 id="2017-09-28">2017-09-28</h2>
 
 <ul>
-<li></li>
+<li>Tunji from the System Organization finally sent the DNS request for library.cgiar.org to CGNET</li>
+<li>Now the redirects work</li>
+<li>I quickly registered a Let&rsquo;s Encrypt certificate for the domain:</li>
 </ul>
 
+<pre><code># systemctl stop nginx
+# /opt/certbot-auto certonly --standalone --email aorth@mjanja.ch -d library.cgiar.org
+# systemctl start nginx
+</code></pre>
+
+<ul>
+<li>I modified the nginx configuration of the ansible playbooks to use this new certificate and now the certificate is enabled and OCSP stapling is working:</li>
+</ul>
+
+<pre><code>$ openssl s_client -connect cgspace.cgiar.org:443 -servername library.cgiar.org  -tls1_2 -tlsextdebug -status
+...
+OCSP Response Data:
+...
+Cert Status: good
+</code></pre>
+
   
 
   

public/cgiar-library-migration/index.html

@@ -13,7 +13,7 @@
 
 
 <meta property="article:published_time" content="2017-09-18T16:38:35&#43;03:00"/>
-<meta property="article:modified_time" content="2017-09-19T22:23:37&#43;03:00"/>
+<meta property="article:modified_time" content="2017-09-27T12:38:56&#43;03:00"/>
 
 
 
@@ -39,7 +39,7 @@
   "url": "https://alanorth.github.io/cgspace-notes/cgiar-library-migration/",
   "wordCount": "1301",
   "datePublished": "2017-09-18T16:38:35&#43;03:00",
-  "dateModified": "2017-09-19T22:23:37&#43;03:00",
+  "dateModified": "2017-09-27T12:38:56&#43;03:00",
   "author": {
     "@type": "Person",
     "name": "Alan Orth"

public/sitemap.xml

@@ -4,7 +4,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/cgiar-library-migration/</loc>
-    <lastmod>2017-09-19T22:23:37+03:00</lastmod>
+    <lastmod>2017-09-27T12:38:56+03:00</lastmod>
   </url>
   
   <url>
@@ -124,7 +124,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/</loc>
-    <lastmod>2017-09-19T22:23:37+03:00</lastmod>
+    <lastmod>2017-09-27T12:38:56+03:00</lastmod>
     <priority>0</priority>
   </url>
   
@@ -135,7 +135,7 @@
   
   <url>
     <loc>https://alanorth.github.io/cgspace-notes/categories/notes/</loc>
-    <lastmod>2017-09-19T22:23:37+03:00</lastmod>
+    <lastmod>2017-09-27T12:38:56+03:00</lastmod>
     <priority>0</priority>
   </url>