News for hackers. Stuff that matters.

A comment on About the Tailscale.com outage on March 7, 2024. Parent comment

Re:About the Tailscale.com outage on March 7, 2024 by bradfitz on Saturday March 30, 2024 @04:47PM (#39878493)
It doesn't. That was one of our mistakes and action items to fix.

The original proxy was stood up quickly when it was first discovered IPv6 was broken and the people standing up the proxy didn't know at the time how ACME worked.

We'll be changing it to just a TCP proxy.

[ Parent | on HN ]
Re:About the Tailscale.com outage on March 7, 2024 by ikiris on Saturday March 30, 2024 @05:37PM (#39878933)
> and the people standing up the proxy didn't know at the time how ACME worked

yikes

[ Parent | on HN ]
Re:About the Tailscale.com outage on March 7, 2024 by bradfitz on Saturday March 30, 2024 @05:43PM (#39878971)
To be fair, it didn't help the provider's docs were inconsistent about whether dns-01 or http-01 was to be used.
[ Parent | on HN ]
Re:About the Tailscale.com outage on March 7, 2024 by PokestarFan on Saturday March 30, 2024 @11:38PM (#39881182)
I've done enough fighting with Certbot to learn that the path of least resistance is to use dns-01 with the cloudflare plugin, and just make a very limited access key and store it on the servers that I am using to renew the cert.
[ Parent | on HN ]