News for hackers. Stuff that matters.

A comment on All extensions disabled due to expiration of intermediate signing cert. Parent comment

Re:All extensions disabled due to expiration of intermediate... by lvh on Friday May 03, 2019 @11:09PM (#19824142)
Short-term certs _are_ a virtue. Not only do you not have a manual event rare enough for people to forget how to do it, you also don't have to worry about which 15 services someone granted a 10 year wildcard cert to early in the company's history.
[ Parent | on HN ]
Re:All extensions disabled due to expiration of intermediate... by zimpenfish on Saturday May 04, 2019 @02:47AM (#19824865)
Having once had to regenerate 600+ self-signed certs, test that everything still worked, and then insert them into the 600+ live app servers without breaking anything, all within a two week window because no-one had realised the 10 year expiry was just about to bring everything down, I concur.
[ Parent | on HN ]