GuyPostington

6 ms·

1.
by GuyPostington 7y ago
So what starts?
2.
by GuyPostington 7y ago
Here's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...
3.
by GuyPostington 7y ago
> Being good at catching errors doesn't soften the blow of the errors being so readily occurring in the first place. Yes it does. If you can see the errors you can change your usage pattern or request a rate limit override. Flying b
4.
by GuyPostington 7y ago
:)
5.
by GuyPostington 7y ago
You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.
6.
by GuyPostington 7y ago
Ways to monitor for cert expiry in no particular order: 1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-... 2) Sensu/Nagios https://github.com/sensu-plugins
7.
by GuyPostington 7y ago
You're funny.
8.
by GuyPostington 7y ago
The parent stated that you can run your own DNS server temporarily for the cost of the hardware to run the server and shut the DNS server off after the certificate has been issued. The cost is basically free.
9.
by GuyPostington 7y ago
You should check out https://community.letsencrypt.org and ask for help there!
10.
by GuyPostington 7y ago
Here you go, read the source. https://raw.githubusercontent.com/letsencrypt/website/master...
11.
by GuyPostington 7y ago
Can you give some more insight on what happened to the team managing openssl during that time? I remember being on-call at a job when the news dropped.
12.
by GuyPostington 7y ago
This is the internet as I remember it.
13.
by GuyPostington 7y ago
You could help too if you choose to contribute to this project! https://github.com/tdelmas/Let-s-Clone
14.
by GuyPostington 7y ago
To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone
15.
by GuyPostington 7y ago
You should post on the community forum if you ever experience an issue like that again. Https://community.letsencrypt.org
16.
by GuyPostington 7y ago
Something similar exists for Sensu too https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...
17.
by GuyPostington 7y ago
$ echo | openssl s_client -connect "www.certera.io":443 -servername "www.certera.io" -verify_hostname "www.certera.io" 2>/dev/null | openssl x509 -noout -issuer issuer=C = US, O = DigiCert
18.
by GuyPostington 7y ago
That's exactly why you should read the book. It's less so about motorcycle than you think.
19.
by GuyPostington 7y ago
Can you show this off? It sounds like something I need to have in my life. What TSDB did you use? What did your conversion from rtl_433 to a metric look like?
20.
by GuyPostington 7y ago
Can you give an example of this garbage?
21.
by GuyPostington 7y ago
Can you give an example of the half baked-ness please?
22.
by GuyPostington 7y ago
I used Ansible in pull mode ( https://docs.ansible.com/ansible/latest/cli/ansible-pull.htm... ) in my UserData for several years. I've since left that company, but the implementation still powers their inf
23.
by GuyPostington 7y ago
I can assure you this was not a tick box operation.
24.
by GuyPostington 7y ago
Probably. What matters is the community response to the outage though. From what I saw there's been a ton of love for the team working through an entire Sunday.
25.
by GuyPostington 7y ago
This links directly to a PDF. Reader beware.
26.
by GuyPostington 7y ago
The name is great.
27.
by GuyPostington 7y ago
Last thing, let me pet the cat in the first room.
28.
by GuyPostington 7y ago
You should put a TLS cert on http://enceladusgame.io/playtest
29.
by GuyPostington 7y ago
You can store the cert and key in a key/val store and each EC2 server would only need to renew the cert.
30.
by GuyPostington 7y ago
What's your program called and how can I test it out? I use LibreCAD which is 2D, but I wish there were more shortcut key combos.

More ›