Uploadcare incident

Expired certificate on ucarecdn.com

Critical Resolved View vendor source →

Uploadcare experienced a critical incident on July 19, 2019 affecting CDN, lasting 3h 35m. The incident has been resolved; the full update timeline is below.

Started
Jul 19, 2019, 03:59 PM UTC
Resolved
Jul 19, 2019, 07:35 PM UTC
Duration
3h 35m
Detected by Pingoru
Jul 19, 2019, 03:59 PM UTC

Affected components

CDN

Update timeline

  1. identified Jul 19, 2019, 03:59 PM UTC

    The issue has been identified and a fix is being implemented.

  2. identified Jul 19, 2019, 05:50 PM UTC

    We are continuing to work on a fix for this issue.

  3. monitoring Jul 19, 2019, 06:03 PM UTC

    A fix has been implemented and we are monitoring the results.

  4. resolved Jul 19, 2019, 07:35 PM UTC

    This incident has been resolved.

  5. postmortem Aug 01, 2019, 02:10 PM UTC

    # What happened On 19th July 2019 at 15:30 UTC certificate used to serve traffic from [ucarecdn.com](http://ucarecdn.com) and [www.ucarecdn.com](http://www.ucarecdn.com) has expired. All HTTPS traffic to these domains effectively stopped. We were able to quickly \(within minutes\) redirect [www.ucarecdn.com](http://www.ucarecdn.com) traffic to alternative CDN provider with proper certificate installed. It took us approximately 105 minutes since start of the incident to fix the issue with [ucarecdn.com](http://ucarecdn.com). ![](https://ucarecdn.com/d07b72c7-36e0-4328-b5b9-902108fff1e9/-/preview/400x300/traffic) # Why that happened 1. Our CDN partner's certificate management system failed to renew the certificate in question and needed an input from our team. 2. It did sent an email 5 days prior to expiration requesting manual input. 3. This email wasn't noticed, because it was sent to a team member that was off the grid on vacation. # What we should do to improve ‌ 1. Change notification system settings, so any issues with certificates with our CDN partners are sent to a team, not a person \[done\] 2. Use 3rd party service to monitor certificate expiration and other settings \[done\] 3. Use CDN partner's APIs to actively and automatically monitor certificates \[in progress\] 4. Create an service that could be used to quickly redirect [ucarecdn.com](http://ucarecdn.com) traffic to backup CDNs in case of any issues with the main one \(not only due to certificates\)