Githubassets.com Cert Has Expired • Hacker News Board

Re: Githubassets.com Cert Has Expired

#11

Post by spydum » Mon, Nov 02, 2020, 12:18 PM UTC

Seems like microsoft has a real issue tracking their cert expiry lately

Re: Githubassets.com Cert Has Expired

#12

Post by SiliconSolder » Mon, Nov 02, 2020, 12:19 PM UTC

Not known on https://www.githubstatus.com/ yet.

Re: Githubassets.com Cert Has Expired

#13

Post by daenney » Mon, Nov 02, 2020, 12:20 PM UTC

melco wrote: post #6

github.githubassets.com expired 1 day ago github.com is OK now

That doesn't seem to be the case.

    openssl s_client -connect github.githubassets.com:443
    verify error:num=10:certificate has expired
    notAfter=Nov  2 12:00;00 2020 GMT

That's today about 22min ago from time of writing, not 1 day ago.

Depending on what your browser still has in its cache, github.com will be in various states of degradation.

Re: Githubassets.com Cert Has Expired

#14

Post by thorin » Mon, Nov 02, 2020, 12:20 PM UTC

Github not working for me either

Re: Githubassets.com Cert Has Expired

#15

Post by SiliconSolder » Mon, Nov 02, 2020, 12:21 PM UTC

SiliconSolder wrote: post #12

Not known on https://www.githubstatus.com/ yet.

Ok, it is now, although they call it an issue with pull requests.

Re: Githubassets.com Cert Has Expired

#16

Post by lysp » Mon, Nov 02, 2020, 12:21 PM UTC

KriiV wrote: post #10

perryizgr8 wrote: post #4

That's why they are serving un-styled pages, I guess. I thought my browser was acting up.

The pages being served are styled, we just can't securely load the stylesheets.

Or javascript.

Re: Githubassets.com Cert Has Expired

#17

Post by hannob » Mon, Nov 02, 2020, 12:21 PM UTC

ta8645 wrote: post #7

Maybe browsers should put up a warning when a certificate is about to expire; say two weeks away. Nobody should let their certificate get that close to expiring, but if it does, you'd rather it generate a lot of visible warnings before simply ceasing to work at all.

Browsers are very careful in introducing warnings to users that are meant to go to admins. They dislike the indirect "but users will complain to admins" route and I can't blame them - every warning a user will see and not understand leads to warning fatigue.

Re: Githubassets.com Cert Has Expired

#18

Post by mg » Mon, Nov 02, 2020, 12:21 PM UTC

This is a script I call "certdays.sh" which you can call from your regular tests like this:

certdays.sh somedomain.com 14

If the certificate for somedomain.com is valid less then 14 days, it will fail:

https://github.com/no-gravity/certdays

Re: Githubassets.com Cert Has Expired

#19

Post by [deleted] » Mon, Nov 02, 2020, 12:23 PM UTC

[deleted]

Re: Githubassets.com Cert Has Expired

#20

Post by diggan » Mon, Nov 02, 2020, 12:24 PM UTC

ta8645 wrote: post #7

Maybe browsers should put up a warning when a certificate is about to expire; say two weeks away. Nobody should let their certificate get that close to expiring, but if it does, you'd rather it generate a lot of visible warnings before simply ceasing to work at all.

Or how about the responsible engineers/testers/managers/whatevers setup proper testing infrastructure for the multi-million projects run by their huge international corporate? Feels like it's not a lot to ask for the most basic testing like checking when certs expire, setup automation to renew it and have fail-safes/error reporting in case the renewal fails.