Hacker News Reader

GuyPostingtonon Techcrunch SSL Cert Expired

> Being good at catching errors doesn't soften the blow of the errors being so readily occurring in the first place.

Yes it does. If you can see the errors you can change your usage pattern or request a rate limit override. Flying blind is the worst way to go!

GuyPostingtonon 18-year-old personal website, built with Frontpage and still updated

GuyPostingtonon Techcrunch SSL Cert Expired

You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.

GuyPostingtonon Techcrunch SSL Cert Expired

Ways to monitor for cert expiry in no particular order:

1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-...

2) Sensu/Nagios https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...

3) Openssl in a crontab:

    echo | openssl s_client -connect ${DOMAIN}:443 -servername ${DOMAIN} -verify_hostname ${DOMAIN} 2>/dev/null | openssl x590 -noout -startdate -enddate

GuyPostingtonon Techcrunch SSL Cert Expired

You're funny.

GuyPostingtonon Let's Encrypt has turned on stricter validation requirements

The parent stated that you can run your own DNS server temporarily for the cost of the hardware to run the server and shut the DNS server off after the certificate has been issued. The cost is basically free.

GuyPostingtonon Let's Encrypt has turned on stricter validation requirements

You should check out https://community.letsencrypt.org and ask for help there!

GuyPostingtonon Let's Encrypt has turned on stricter validation requirements

Here you go, read the source. https://raw.githubusercontent.com/letsencrypt/website/master...

GuyPostingtonon Let's Encrypt: an automated certificate authority to encrypt the entire web

Can you give some more insight on what happened to the team managing openssl during that time? I remember being on-call at a job when the news dropped.

GuyPostingtonon 18-year-old personal website, built with Frontpage and still updated

This is the internet as I remember it.

GuyPostingtonon Let's Encrypt: an automated certificate authority to encrypt the entire web

You could help too if you choose to contribute to this project! https://github.com/tdelmas/Let-s-Clone

GuyPostingtonon Let's Encrypt: an automated certificate authority to encrypt the entire web

To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone

GuyPostingtonon Let's Encrypt: an automated certificate authority to encrypt the entire web

You should post on the community forum if you ever experience an issue like that again. Https://community.letsencrypt.org

GuyPostingtonon Microsoft Teams outage due to expired certificate

Something similar exists for Sensu too https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...

GuyPostingtonon Microsoft Teams outage due to expired certificate

   $ echo | openssl s_client -connect "www.certera.io":443 -servername "www.certera.io" -verify_hostname "www.certera.io" 2>/dev/null | openssl x509 -noout -issuer
   issuer=C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 High Assurance Server CA

   $ echo | openssl s_client -connect "certera.io":443 -servername "certera.io" -verify_hostname "certera.io" 2>/dev/null | openssl x509 -noout -issuer
   issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

GuyPostingtonon The Cycle from ‘Zen and the Art of Motorcycle Maintenance’ Comes to Smithsonian

That's exactly why you should read the book. It's less so about motorcycle than you think.

GuyPostingtonon Guide to Software Defined Radio

Can you show this off? It sounds like something I need to have in my life. What TSDB did you use? What did your conversion from rtl_433 to a metric look like?

GuyPostingtonon Binary Authorization for Borg

Can you give an example of this garbage?

GuyPostingtonon Proxmox VE 6.1 – Open-Source virtualization platform

Can you give an example of the half baked-ness please?

GuyPostingtonon Configuring Ansible

I used Ansible in pull mode (https://docs.ansible.com/ansible/latest/cli/ansible-pull.htm...) in my UserData for several years. I've since left that company, but the implementation still powers their infrastructure. I had Ansible emit slack notifications when it started and completed. If the initial deploy ever failed, the node would eventually fail a healthcheck and that server would be destroyed and throw a different slack notification via an autoscaling group lifecycle monitor.

GuyPostingtonon Let's Encrypt certificate issuance was down

I can assure you this was not a tick box operation.

GuyPostingtonon Let's Encrypt certificate issuance was down

Probably. What matters is the community response to the outage though. From what I saw there's been a ton of love for the team working through an entire Sunday.

GuyPostingtonon DNS over HTTPS–What Is It and Why Do People Care? [pdf]

This links directly to a PDF. Reader beware.

GuyPostingtonon Asciicker – an online 3D game demo rendering to ASCII text

The name is great.

GuyPostingtonon Show HN: Noric-bot – A bot to stress-test text-based MUDs, written in Scala 3

Last thing, let me pet the cat in the first room.

GuyPostingtonon Show HN: Noric-bot – A bot to stress-test text-based MUDs, written in Scala 3

You should put a TLS cert on http://enceladusgame.io/playtest

GuyPostingtonon Let's Encrypt makes certs for 30% of web domains

You can store the cert and key in a key/val store and each EC2 server would only need to renew the cert.

GuyPostingtonon The Wood Database

What's your program called and how can I test it out? I use LibreCAD which is 2D, but I wish there were more shortcut key combos.