Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 11 submissions in the queue.

Meta: Site Certificates Updated

posted by martyb on Thursday March 14 2019, @02:30PM   Printer-friendly
from the certs-are-not-just-a-breath-mint dept.

martyb writes:

With many thanks to The Mighty Buzzard riding shotgun and helping me through some misunderstandings, I updated the certificates (certs) for all of SoylentNews' domains. Our certs are now good through: Wednesday, June 12, 2019.

Everything seemed to go as expected. If you experience any issues, please mention them here, or pop onto our IRC channel using your favorite client or the web interface and speak up in the #dev or #Soylent channel.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Meta: Site Certificates Updated | Log In/Create an Account | Top | 51 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2) by NewNic on Friday March 15 2019, @06:53PM (1 child)

    by NewNic (6420) on Friday March 15 2019, @06:53PM (#814956) Journal

    If you put all the hostnames that just beryllium uses in one cert, you have to make more than one webserver with many different vhosts

    No, you exclude the "/.well-known" location from the Vhosts. This can be achieved with an alias command.
    https://community.letsencrypt.org/t/apache-multidomain-webroot/10663 [letsencrypt.org]

    --
    lib·er·tar·i·an·ism ˌlibərˈterēənizəm/ noun: Magical thinking that useful idiots mistake for serious political theory
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  
    Total Score:   2  

  • (Score: 2) by The Mighty Buzzard on Saturday March 16 2019, @12:43AM

    by The Mighty Buzzard (18) Subscriber Badge <themightybuzzard@proton.me> on Saturday March 16 2019, @12:43AM (#815184) Homepage Journal

    Or I could do like I'm doing and never have to touch the configs of anything but the one we pull the cert from. And never have to remake the entire enormous cert, hoping I don't miss a hostname but knowing I will, if Deucalion thinks we need a new IRC hostname on one of the existing boxes.

    --
    My rights don't end where your fear begins.