Skip to main content

IN-001 — SSL Certificate Management

FieldValue
PriorityInfrastructure
CategoryInfrastructure
Gap itemSSL Certificate Management
DescriptionCertificate renewal, web server SSL configuration — handled at server/infrastructure level
Documentation statusDocumented
Code locationOutside codebase
Assigned to
  • docs/infrastructure/IN-001-SSL-CERTIFICATE-MANAGEMENT.md
  • docs/infrastructure/IN-001-SSL-CERTIFICATE-MANAGEMENT-STAGING.md

Documentation

This topic was added to Developer Docs and is shown here so the team can review the documented coverage for this gap in one place.


Developer Docs — docs/infrastructure/IN-001-SSL-CERTIFICATE-MANAGEMENT.md

IN-001 — SSL Certificate Management

Confirmed production findings for SSL/TLS on the Rahva Raamat web host.

Source: Zone.ee portal screenshots, 31 July 2026.

SSL certificate

ItemValue
Certificate statusActive
Domainweb.rahvaraamat.ee
Certificate expiry28-10-2026
Certificate label28.10.2026 - web…araamat.ee - YR2
HTTPS enabledYes
HTTP → HTTPS redirectEnabled
ItemValue
PHP versionPHP 8.3
PHP upgrade strategyManual
Web Application Firewall (WAF)Disabled
Custom error pages (400–500)Not configured

Document root

/data01/virt102759/domeenid/www.web.rahvaraamat.ee/uus-rahvaraamat/

Summary

Production HTTPS is enabled for web.rahvaraamat.ee, the certificate is active, and it expires on 28 October 2026. PHP on this host is 8.3 (upgraded manually). WAF is disabled. Custom Apache error pages are not configured.


Developer Docs — docs/infrastructure/IN-001-SSL-CERTIFICATE-MANAGEMENT-STAGING.md

IN-001 — SSL Certificate Management (Staging)

Confirmed staging findings for SSL/TLS on the Rahva Raamat staging host.

Source: Zone.ee portal screenshots, 31 July 2026.

SSL certificates

Three SSL certificates are configured for staging:

DomainStatusExpiry
dev.rahvaraamat.eeActive09-09-2026
audio.dev.rahvaraamat.eeActive22-09-2026
main.dev.rahvaraamat.eeActive27-10-2026

HTTPS configuration

ItemValue
HTTPS enabledYes
PHP version (main dev.rahvaraamat.ee)PHP 8.3
PHP version (audio.dev / main.dev)PHP 8.4
PHP upgrade strategy (main)Manual
Web Application Firewall (WAF)Disabled
Custom error pages (400–500)Not configured

Virtual IP

ItemValue
IPv4217.146.71.63
IPv62A02:29EA:A:295::1CA

Document root

/data01/virt20240/domeenid/www.dev.rahvaraamat.ee/uus-rahvaraamat/

Summary

Staging HTTPS is enabled. Certificates for dev.rahvaraamat.ee, audio.dev.rahvaraamat.ee, and main.dev.rahvaraamat.ee are Active (expiry Sep–Oct 2026). Main host PHP is 8.3; subdomain hosts use 8.4. WAF is disabled. Custom Apache error pages are not configured.