Viewing profile — GuyPostington

So what starts?

Here's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...

> Being good at catching errors doesn't soften the blow of the errors being so readily occurring in the first place. Yes it does. If you can see the errors you can change your usag…

:)

You know you could monitor your certs to verify that your client is functioning correctly. There's also notification emails if you provide your email address at issuance time.

Ways to monitor for cert expiry in no particular order: 1) Prometheus + blackbox_exporter https://www.robustperception.io/get-alerted-before-your-ssl-... 2) Sensu/Nagios https://gi…

You're funny.

The parent stated that you can run your own DNS server temporarily for the cost of the hardware to run the server and shut the DNS server off after the certificate has been issued.…

You should check out https://community.letsencrypt.org and ask for help there!

Here you go, read the source. https://raw.githubusercontent.com/letsencrypt/website/master...

Can you give some more insight on what happened to the team managing openssl during that time? I remember being on-call at a job when the news dropped.

This is the internet as I remember it.

You could help too if you choose to contribute to this project! https://github.com/tdelmas/Let-s-Clone

To help produce an LE2, please contribute to https://github.com/tdelmas/Let-s-Clone

You should post on the community forum if you ever experience an issue like that again. Https://community.letsencrypt.org

Something similar exists for Sensu too https://github.com/sensu-plugins/sensu-plugins-http/blob/mas...

$ echo | openssl s_client -connect "www.certera.io":443 -servername "www.certera.io" -verify_hostname "www.certera.io" 2>/dev/null | openssl x509 -noout -issuer issuer=C = US, O = …

That's exactly why you should read the book. It's less so about motorcycle than you think.

Can you show this off? It sounds like something I need to have in my life. What TSDB did you use? What did your conversion from rtl_433 to a metric look like?

Can you give an example of this garbage?

Can you give an example of the half baked-ness please?

I used Ansible in pull mode ( https://docs.ansible.com/ansible/latest/cli/ansible-pull.htm... ) in my UserData for several years. I've since left that company, but the implementati…

I can assure you this was not a tick box operation.

Probably. What matters is the community response to the outage though. From what I saw there's been a ton of love for the team working through an entire Sunday.

This links directly to a PDF. Reader beware.