SoylentNews is people
SoylentNews
We had an hour or so or downtime today. After debugging, the root cause came from the SSL certificates we use to establish a database connection from the webserver to the actual DB. As a prelude GoLive, we migrated from unencrypted connections to encrypted connections as we have to cross the Linode internal LAN. In an attempt to improve data security, we generated a set of SSL certificates and used those to encrypt the MySQL connections. In the flurry of golive, no one thought to check the expiry date on said certificates. Out of the box, OpenSSL generates certificates with a one month expiry unless manually changed.
As you might expect, one month later, the certificates expired, and the database stopped accepting remote connections. New certificates were generated with a ten year expiration, and we continue to work towards better documenting our internal processes on the wiki to prevent this sort of thing from happening again. Apache, and slashd are running again, and we appear to be back to status-quo in terms of site operation.
A full incident report will be written up and posted to the wiki in the next few days.
As you might expect, one month later, the certificates expired, and the database stopped accepting remote connections. New certificates were generated with a ten year expiration, and we continue to work towards better documenting our internal processes on the wiki to prevent this sort of thing from happening again. Apache, and slashd are running again, and we appear to be back to status-quo in terms of site operation.
A full incident report will be written up and posted to the wiki in the next few days.
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Can anyone remember when the times were not hard, and money not scarce?
(Score: 5, Informative) by isostatic on Friday March 14 2014, @02:26PM
The only conclusion i came to was that he may have been blocked and if he was it must have been for something bad.
If it was due to evidence of ddos on his part then fair enough
He's a troll, but that's a common reason to ban someone from IRC.
(Score: 2, Informative) by Anonymous Coward on Friday March 14 2014, @03:04PM
Who kept feeding the troll? Trolls don't begin by threatening a ddos attack. Surely anyone who has been around irc for more than 5 minutes would know that the worst way to deal with a troll is to respond. If khyber's rants were ignored as all rants should be, it likely would never have escalated to such bitterness. Irc is full of trolls. If ops go around threatening anyone that they think might be trolling, users won't know what they can talk about and they're likely going to kill the channel (not literally, but it won't be interesting enough to keep users engaged).