[OpenAFS-devel] gerrit/launchpad outage

Benjamin Kaduk kaduk@mit.edu
Fri, 28 Jun 2019 16:54:22 -0500


On Thu, Jun 27, 2019 at 10:59:50PM -0500, Benjamin Kaduk wrote:
> On Thu, Jun 27, 2019 at 12:24:47PM -0500, Benjamin Kaduk wrote:
> > Hi all,
> > 
> > It looks like using launchpad OpenID to log in to OpenAFS gerrit is not
> > working at the moment.
> > I may attempt to upgrade our version of gerrit as a potential remediation
> > step, so sorry in advance for the disruption and unplanned maintenance.
> 
> Just as a status update: this remains broken, though we are now on a
> slightly newer version of gerrit (2.13.13).
> My current theory is that launchpad has switched to using a certificate
> that chains to a LetsEncrypt CA that is not in the trust roots used by the
> java runtime that gerrit is running in.  I've reached out to the experts
> for the hosting environment we're running in, to discuss what the best
> options are for bringing us back to full functionality.

We managed to figure out an upgrade path, so I believe that gerrit is back
and functional, specifically in terms of using Launchpad for OpenID login.

There will probably be an additional outage in the near future in order to
take additional gerrit updates.

-Ben