Jump to content

Shit's Borked


RPM

Recommended Posts

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Edited by Captainant
Link to comment
Share on other sites

11 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

 

8 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Totally this. And also you guys need to prepare the feltzer valve with some 3 in 1 oil and some gauze pads. 

  • Haha 2
Link to comment
Share on other sites

17 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

wtf is this science?

Link to comment
Share on other sites

8 minutes ago, NowThis said:

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

Same thing with Microsoft Edge  What information is Surly trying to steal from me, anyway?

Edited by ImissWallyPryor
can't spell
Link to comment
Share on other sites

7 minutes ago, NowThis said:

wtf is this science?

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Link to comment
Share on other sites

Basically, all that the cert error means is that the connection is no longer guaranteed to be end-to-end encrypted. Nothing necessarily sinister, just a pain in the ass. Also I'm pretty sure it's breaking some of the site functionality like tagging users and editing posts because the javascript is erroring out on invalid cert errors when I take a look at the console out of the webpage load

Link to comment
Share on other sites

15 minutes ago, Captainant said:

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Lets Encrypt is awesome, free, and offers usually automatically renewed 90 day certs. The overpriced cert oligopoly is one of the more annoying things on the internet. 

Link to comment
Share on other sites

57 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Because without 3 year upfront pricing the difference in cost is almost 2 orders of magnitude difference and most of the issues are not hardware related at all. Cert rotation is easy and we are just going to make sure it works right from here on. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...