GuyPostington
Joined 9 years ago
Karma
147
Submissions
60
Member since
Nov 28
Just a guy on the internet.
View on Hacker NewsRecent submissions
Comment · 6 years ago
So what starts?
Comment · 6 years ago
Here's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...
Comment · 6 years ago
> Being good at catching errors doesn't soften the blow of the errors being so readily occurring in the first place.
Yes it does. If you can see the errors you can change your usage pattern or request a rate limit override. Flying blind is the worst way to go!
Comment · 6 years ago
:)
Comment · 6 years ago
You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.
Comment · 6 years ago
Ways to monitor for cert expiry in no particular order:
1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-...
2) Sensu/Nagios https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...
3) Openssl in a crontab:
echo | openssl s_client -connect ${DOMAIN}:443 -servername ${DOMAIN} -verify_hostname ${DOMAIN} 2>/dev/null | openssl x590 -noout -startdate -enddateComment · 6 years ago
You're funny.
Comment · 6 years ago
The parent stated that you can run your own DNS server temporarily for the cost of the hardware to run the server and shut the DNS server off after the certificate has been issued. The cost is basically free.
Comment · 6 years ago
You should check out https://community.letsencrypt.org and ask for help there!
Comment · 6 years ago
Here you go, read the source. https://raw.githubusercontent.com/letsencrypt/website/master...
Comment · 6 years ago
Can you give some more insight on what happened to the team managing openssl during that time? I remember being on-call at a job when the news dropped.
Comment · 6 years ago
This is the internet as I remember it.
Comment · 6 years ago
You could help too if you choose to contribute to this project! https://github.com/tdelmas/Let-s-Clone
Comment · 6 years ago
To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone
Comment · 6 years ago
You should post on the community forum if you ever experience an issue like that again. Https://community.letsencrypt.org