Jump to content

Shit's Borked

RPM

By RPM
in Please do this better?

 Share

Recommended Posts

  • Replies 6.3k
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

immamac
immamac

Tornado hit data center. Sorry for downtime. Going to have more downtime to fix later Please report weird shit here but I'm with my family and mobile only. I just spent about an hour on a bench o

hookemATL
hookemATL

I had to draw porno. Wasn’t great but I finished

immamac
immamac

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here.  The passwords are encrypted at rest in

Posted Images

Captainant

Captainant 27,625

Posted
Posted (edited)

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Edited by Captainant
Link to comment
Share on other sites
bschoolprof

bschoolprof 6,251

Posted
Posted
11 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

 

8 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

Totally this. And also you guys need to prepare the feltzer valve with some 3 in 1 oil and some gauze pads. 

  • Haha 2
Link to comment
Share on other sites
NowThis

NowThis 931

Posted
Posted
17 minutes ago, Captainant said:

ffs guy, use a certificate manager or some shit to update your certs automatically. Use AWS ACM you wouldn't have this issue anymore and the SSL certs are free. Don't need anything on AWS to use it, not even domain registration on route53 

EDIT: Huh, their SSL provider, Let's Encrypt, says they do automatic cert rotation. No idea why it's broken, but cmon man

wtf is this science?

Link to comment
Share on other sites
ImissWallyPryor

ImissWallyPryor 9,046

Posted
Posted (edited)
8 minutes ago, NowThis said:

getting the warning on Google Chrome that it's not a Secure Connection. I go to the Advanced section and get on anyway, but this warning there yesterday. My cache error or something with Surly?

Same thing with Microsoft Edge  What information is Surly trying to steal from me, anyway?

Edited by ImissWallyPryor
can't spell
Link to comment
Share on other sites
Captainant

Captainant 27,625

Posted
Posted
7 minutes ago, NowThis said:

wtf is this science?

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Link to comment
Share on other sites
Captainant

Captainant 27,625

Posted
Posted

Basically, all that the cert error means is that the connection is no longer guaranteed to be end-to-end encrypted. Nothing necessarily sinister, just a pain in the ass. Also I'm pretty sure it's breaking some of the site functionality like tagging users and editing posts because the javascript is erroring out on invalid cert errors when I take a look at the console out of the webpage load

Link to comment
Share on other sites
FondrenRoad

FondrenRoad 4,378

Posted
Posted
15 minutes ago, Captainant said:

HTTPS is an encryption protocol for your HTTP browsing. The encryption is validated through a trusted third party that authenticates that it's genuine and the communication you're receiving from the server is actually from the server and not a 3rd party (like in a man in the middle attack). An expired SSL (secure sockets layer) cert basically means that the certificate is no longer being validated by the third party, because they have a built in expiration date so it forces certificate rotation which further heightens security.

On any website using HTTPS, you can click on the little lock symbol in the address bas (or in this case, the red triangle) and look at the SSL cert and see who issued it, it's TTL (time to live), fingerprint, and a number of other technical details.

Most cert providers do automatic rotation, but some services are more mature than others lol. I'm guessing immamac either missed the expiration notice email, the provider "Lets Encrypt" failed to send it, or it got spam filtered. It's a pretty quick fix, but you also need the proverbial keys to the castle to do so. 

Lets Encrypt is awesome, free, and offers usually automatically renewed 90 day certs. The overpriced cert oligopoly is one of the more annoying things on the internet. 

Link to comment
Share on other sites
immamac

immamac 42,834

Posted
Posted
57 minutes ago, Vertigo said:

Yep, cert just expired. Honest question but why don’t you guys host the site on a PaaS? Seems like so many of these types of issues are auto managed for you on a platform like Heroku or Azure. 

Because without 3 year upfront pricing the difference in cost is almost 2 orders of magnitude difference and most of the issues are not hardware related at all. Cert rotation is easy and we are just going to make sure it works right from here on. 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing


Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business and Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Subscribe!... Donate!... Advertise... COOKIE MONSTER!

×
×
  • Create New...