GuyPostington
Re:Revoking certain certificates on March 4
on Tuesday March 03, 2020 @08:38AM (#22474308)
So what starts?
Re:Let's Encrypt Has Issued a Billion Certificates
on Thursday February 27, 2020 @02:16PM (#22436714)
Here's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...
Re:Techcrunch SSL Cert Expired
on Wednesday February 26, 2020 @03:40PM (#22427084)
> Being good at catching errors doesn't soften the blow of the errors being so readily occurring in the first place.
Yes it does. If you can see the errors you can change your usage pattern or request a rate limit override. Flying blind is the worst way to go!
Re:18-year-old personal website, built with Frontpage and still updated
on Wednesday February 26, 2020 @11:45AM (#22424649)
:)
Re:Techcrunch SSL Cert Expired
on Wednesday February 26, 2020 @11:38AM (#22424563)
You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.
Re:Techcrunch SSL Cert Expired
on Wednesday February 26, 2020 @11:36AM (#22424525)
Ways to monitor for cert expiry in no particular order:
1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-...
2) Sensu/Nagios https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...
3) Openssl in a crontab:
echo | openssl s_client -connect ${DOMAIN}:443 -servername ${DOMAIN} -verify_hostname ${DOMAIN} 2>/dev/null | openssl x590 -noout -startdate -enddate
Re:Techcrunch SSL Cert Expired
on Wednesday February 26, 2020 @11:32AM (#22424484)
You're funny.
Re:Let's Encrypt has turned on stricter validation requirements
on Wednesday February 19, 2020 @04:10PM (#22370092)
The parent stated that you can run your own DNS server temporarily for the cost of the hardware to run the server and shut the DNS server off after the certificate has been issued. The cost is basically free.
Re:Let's Encrypt has turned on stricter validation requirements
on Wednesday February 19, 2020 @04:08PM (#22370075)
You should check out https://community.letsencrypt.org and ask for help there!
Re:Let's Encrypt has turned on stricter validation requirements
on Wednesday February 19, 2020 @12:51PM (#22368009)
Here you go, read the source. https://raw.githubusercontent.com/letsencrypt/website/master...
Re:Let's Encrypt: an automated certificate authority to encrypt the en...
on Friday February 14, 2020 @10:51AM (#22327523)
Can you give some more insight on what happened to the team managing openssl during that time? I remember being on-call at a job when the news dropped.
Re:18-year-old personal website, built with Frontpage and still updated
on Friday February 14, 2020 @10:47AM (#22327490)
This is the internet as I remember it.
Re:Let's Encrypt: an automated certificate authority to encrypt the en...
on Wednesday February 12, 2020 @11:53AM (#22310406)
You could help too if you choose to contribute to this project! https://github.com/tdelmas/Let-s-Clone
Re:Let's Encrypt: an automated certificate authority to encrypt the en...
on Wednesday February 12, 2020 @11:52AM (#22310396)
To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone
Re:Let's Encrypt: an automated certificate authority to encrypt the en...
on Wednesday February 12, 2020 @07:56AM (#22308392)
You should post on the community forum if you ever experience an issue like that again. Https://community.letsencrypt.org
Re:Microsoft Teams outage due to expired certificate
on Monday February 03, 2020 @05:06PM (#22229779)
Something similar exists for Sensu too https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...
Re:Microsoft Teams outage due to expired certificate
on Monday February 03, 2020 @05:03PM (#22229729)
$ echo | openssl s_client -connect "www.certera.io":443 -servername "www.certera.io" -verify_hostname "www.certera.io" 2>/dev/null | openssl x509 -noout -issuer
issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA
$ echo | openssl s_client -connect "certera.io":443 -servername "certera.io" -verify_hostname "certera.io" 2>/dev/null | openssl x509 -noout -issuer
issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Re:The Cycle from ‘Zen and the Art of Motorcycle Maintenance’ Comes to...
on Saturday December 21, 2019 @09:14AM (#21851249)
That's exactly why you should read the book. It's less so about motorcycle than you think.
Re:Guide to Software Defined Radio
on Friday December 20, 2019 @04:12PM (#21847412)
Can you show this off? It sounds like something I need to have in my life. What TSDB did you use? What did your conversion from rtl_433 to a metric look like?
Re:Binary Authorization for Borg
on Tuesday December 17, 2019 @02:36PM (#21817750)
Can you give an example of this garbage?
Re:Proxmox VE 6.1 – Open-Source virtualization platform
on Thursday December 05, 2019 @12:38PM (#21714315)
Can you give an example of the half baked-ness please?
Re:Configuring Ansible
on Tuesday November 19, 2019 @12:33PM (#21575642)
I used Ansible in pull mode (https://docs.ansible.com/ansible/latest/cli/ansible-pull.htm...) in my UserData for several years. I've since left that company, but the implementation still powers their infrastructure. I had Ansible emit slack notifications when it started and completed. If the initial deploy ever failed, the node would eventually fail a healthcheck and that server would be destroyed and throw a different slack notification via an autoscaling group lifecycle monitor.
Re:Let's Encrypt certificate issuance was down
on Sunday November 17, 2019 @10:12PM (#21561621)
I can assure you this was not a tick box operation.
Re:Let's Encrypt certificate issuance was down
on Sunday November 17, 2019 @03:29PM (#21559889)
Probably. What matters is the community response to the outage though. From what I saw there's been a ton of love for the team working through an entire Sunday.
Re:DNS over HTTPS–What Is It and Why Do People Care? [pdf]
on Sunday October 20, 2019 @11:09PM (#21309049)
This links directly to a PDF. Reader beware.
Re:Asciicker – an online 3D game demo rendering to ASCII text
on Wednesday September 18, 2019 @11:05AM (#21006159)
The name is great.
Re:Show HN: Noric-bot – A bot to stress-test text-based MUDs, written ...
on Friday September 13, 2019 @01:46PM (#20964456)
Last thing, let me pet the cat in the first room.
Re:Show HN: Noric-bot – A bot to stress-test text-based MUDs, written ...
on Friday September 13, 2019 @01:35PM (#20964343)
You should put a TLS cert on http://enceladusgame.io/playtest
Re: Let's Encrypt makes certs for 30% of web domains
on Friday September 06, 2019 @03:29PM (#20899026)
You can store the cert and key in a key/val store and each EC2 server would only need to renew the cert.
Re:The Wood Database
on Saturday July 06, 2019 @08:21AM (#20369289)
What's your program called and how can I test it out? I use LibreCAD which is 2D, but I wish there were more shortcut key combos.