Looks like it might take us a day or so to renew them. Ugh.

Now, how will we remember to do this in the future?

I think there's a calendar somewhere with expiry dates, and this cert was just missed. I'll verify and make sure there's one such calendar.

T112542 refers to a 'tracking calendar'. And this is sort of part of that.

Thanks for working on this :-)

Just for info, this breaks most Wikivoyage articles (they embed a dynamic map frame generated by tools.wmflabs.org):

Should the Wikivoyage tool perhaps be moved to a production or production-like machine to prevent such occurrences? From what I've heard, anything that breaks the actual page of a Wikimedia wiki (not bot/maintenance tasks) should be put on a higher priority machine. (topic for another task; cc me if one is made)

In T112608#1640292, @Negative24 wrote:

Should the Wikivoyage tool perhaps be moved to a production or production-like machine to prevent such occurrences? From what I've heard, anything that breaks the actual page of a Wikimedia wiki (not bot/maintenance tasks) should be put on a higher priority machine. (topic for another task; cc me if one is made)

There is a maps.wikimedia.org service in progress that I believe is supposed to be a more "official" maps service - see Yurik's comments at the end of the https://en.wikivoyage.org/wiki/Wikivoyage:Travellers%27_pub#Dynamic_maps thread - but my understanding is that it is still a work-in-progress and that issues still need to be resolved.

We are waiting on the CA to re-issue the certificate and will be back online as soon as that happens. Might be up to midday west coast time however :(

In T112608#1641865, @coren wrote:

The new certificates have been issued, and I've pushed them to the servers (specifically, the labs-wide dynamicproxy and the tools-specific proxies and static web servers).

As far as I can tell, that covers everything.

Thanks for the quick solution - things look fine to me now when I open https://tools.wmflabs.org/ or pull up a Wikivoyage map such as https://en.wikivoyage.org/wiki/Culver_City#Get_around.

Left to be done is to add a monitoring probe for the certificate expiry T112645: Add a monitoring check for *.wmflabs.org certificate