Manjaro Blames GlobalSign for SSL Cert expiry after not receiving “extension” | Hacker News Reader

Manjaro Blames GlobalSign for SSL Cert expiry after not receiving “extension”

manjaro.github.io

24 pointsandygambles10 comments

"Free SSL Certificates for Open Source Projects" https://www.globalsign.com/en/ssl/ssl-open-source/

What does he mean by "extension"? How can you extend validity of an SSL certificate? Or is that the point, he's just making stuff up?

You do not ask for an extension of an SSL certificate, but you get a new one signed with another expiry date.

I think it is theoretically possible to change the expiration date, and ask a certification authority to sign that new certificate, but I have never heard of that happening anyways.

Have the addressed the way they handled the issue, rather than the issue itself? It's one thing to have an expired certificate, but it's another to advise people to turn their clocks back to get around the issue...

They have now "renewed" the certificate. However it seems they believed GlobalSign would issue an "extension".

I read it differently; they thought they could negotiate a renewal free of charge or at a discount and didn't have a plan B.

Here's another story from manjaro last week: https://manjaro.github.io/expired_SSL_certificate/

They have suggested users to adjust their computer time a couple of days before the expiration to use the site.

They should really start reading about how the SSL works.

I'm getting really tired of seeing them raked over the coals for having the audacity to even suggest the "time change" work-around. If I remember right (it has been edited, sadly), changing your time was given as the last possible work around in a list of 4-5, and was marked as a "last resort" and not really a great idea.

I think the amount of reaction this story has gotten over the last week is completely attributed to click-bait headlines that quote that out of context, by people who only read said headline. This is not worth crucifying these people over.

I'm a Manjaro user and wanted to check my forum post. Since it didn't work any more I read the blog and the timer thing was the only workaround. Maybe they added a list later. But NVM why do people care? Its a stupid workaround & suggestion, but I was very surprised when I saw that so many people took a interest in it.

It was originally the only workaround offered

https://twitter.com/servertastic/status/586113649766494208

Reply on news.ycombinator.com