[OpenAFS-devel] gerrit/launchpad outage

Benjamin Kaduk kaduk@mit.edu
Thu, 27 Jun 2019 22:59:50 -0500


On Thu, Jun 27, 2019 at 12:24:47PM -0500, Benjamin Kaduk wrote:
> Hi all,
> 
> It looks like using launchpad OpenID to log in to OpenAFS gerrit is not
> working at the moment.
> I may attempt to upgrade our version of gerrit as a potential remediation
> step, so sorry in advance for the disruption and unplanned maintenance.

Just as a status update: this remains broken, though we are now on a
slightly newer version of gerrit (2.13.13).
My current theory is that launchpad has switched to using a certificate
that chains to a LetsEncrypt CA that is not in the trust roots used by the
java runtime that gerrit is running in.  I've reached out to the experts
for the hosting environment we're running in, to discuss what the best
options are for bringing us back to full functionality.

In the meantime, the ssh interface remains functional, e.g.,
https://gerrit.openafs.org/Documentation/cmd-review.html to make reviews
and patchset-level comments.  (I don't see a way to make inline comments
via this interface, unfortunately.)

My apologies for the continued disruption.

-Ben