SoylentNews is people
SoylentNews
Just a quick note, as previously noted, our SSL certificates were due to expire. Due to various headaches involving issues changing our DNS records, and my personal unavailability, we were unable to renew our certificates in time. Right now, soylentnews.org is running on a LetsEncrypt certificate that was issued after quite a bit of pain. We're still trying to fix the fundamental issues that prevented us from being issued a two year Gandi certificate. Currently, I'm unable to resolve this issue more in-depth, but I've granted access to TheMightyBuzzard to be able help handle the necessary issues that caused the downtime. I will try to get a full writeup of the situation, but for the time being, the main site is up. Secondary services remain down due to the same renewal issues.
Apologies for any inconvenience,
NCommander
(Score: 5, Informative) by The Mighty Buzzard on Sunday July 01 2018, @02:55AM (2 children)
Well, NCommander will have to fill you in on the Gandi cert but what happened with LE was Linode quit pulling soylentnews.org zone updates from boron for some reason while I was figuring out the proper TXT entries to add, so no DNS challenge possibility for a new cert from them. I dunno if it was something I did or something fubar on Linode's end but I'll give it another shot tomorrow to see if we can get a "soylentnews.com,*.soylentnews.com,sylnt.us,*.sylnt.us" cert and just pass it around to all the various boxes that need it.
My rights don't end where your fear begins.
(Score: 3, Informative) by RS3 on Sunday July 01 2018, @03:01AM (1 child)
Would this help? https://certbot.eff.org/ [eff.org]
(Score: 3, Interesting) by The Mighty Buzzard on Sunday July 01 2018, @03:28AM
Not especially but thanks for the link. They're all "no http challenges for wildcard certs" and I'm not automating something that fucks with our nameserver (too much potential for epic breakage), so I'll just be updating it every couple months by hand.
My rights don't end where your fear begins.