INCIDENT 023 | SSL Certificates Expired

[Christian-MK]

Trigger

• ⬛ suspected malware infections
• ⬛ access violations
• ⬛ anomalous system behaviors
• ✔️ human errors
• ⬛ unauthorized access attempts

Date

2023-03-16

Summary

SSL certificates expiry meant 18:00 UTC datum was delayed until 18:10 UTC.

Status

Resolved

Assessment

This issue mirrors https://github.com/orcfax/Incidents/issues/5. The SSL renewal process remains a manual process and its scheduling fell outside of more regular maintenance hours for the team-members who normally look after this.

The issue was diagnosed quickly after the datum publishing was delayed and a new datum was published.

Additional Notes

The 18:00 UTC datum was delayed and published at approximately 18:10 UTC.

Technical improvements

We have configured the expiry notification so that it shouldn't be missed by Orcfax team members.

We are investigating:

1. The potential to perform multiple maintenance activities at the same time as each other, e.g. when performing token certificate renewal, SSL certificate renewal can be performed at the same time.

Documentation improvements

N/A.