Live data from Hacker News

Parse is down due to SSL certificate expiry

parse.com

21–30 of 56 posts

Re: Parse is down due to SSL certificate expiry

#22

It costs $100 for a 5 year SSL certificate. Why do seemingly smart internet companies let this happen?

Where the hell are you buying your certs? I'd honestly love to know.

I get SSL certificates from Servertastic. They are a RapidSSL reseller, whom in turn sell rebranded GeoTrust certificates. The result is that you get "the same thing" (by the end of the payment process you are filling out forms being served by GeoTrust's servers) for $13.95/yr.

Re: Parse is down due to SSL certificate expiry

#24
post #5
post #3

Earlier quoted context omitted.

Now, imagine the plight of all their customers who had built their apps based on their APIs. Hopefully, this is a very good lesson for all.

Indeed... we just finished our app building on Parse, but this and last week make me think hard about whether or not it was a good decision to be dependent on their infrastructure.

I used it to speed up the iOS dev on http://www.backspac.es as I had no experience with iOS but lots of backend experience.

Honestly, they have a lot of downtime, and now that I am very handy with iOS/obj-c I plan to migrate off.

Re: Parse is down due to SSL certificate expiry

#25

It costs $100 for a 5 year SSL certificate. Why do seemingly smart internet companies let this happen?

Where the hell are you buying your certs? I'd honestly love to know.

Namecheap or SoftLayer (where I host my servers) unless I need something fancy like EV or Wildcard (in which case, you're gonna have to pay).

Re: Parse is down due to SSL certificate expiry

#26
post #15

Do yourself a favor and run this nightly: http://prefetch.net/code/ssl-cert-check A simple loop over your certs will solve so many problems: cd ssl/certs; for pem in *.pem; do ssl-cert-check -a -x 15 -e admin@yourdomain.com -q -c $pem; done [imagine a grumpy "silly companies with millions of dollars in funding, no actual processes, and too little systems knowledge" rant here. it's like a racecar driver who's team let…

Also, the nagios monitoring "check_http" will check the time to expiry of HTTPS certificates, and warn you when you have 30 days left. http://nagiosplugins.org/man/check_http

Re: Parse is down due to SSL certificate expiry

#27
post #15

Do yourself a favor and run this nightly: http://prefetch.net/code/ssl-cert-check A simple loop over your certs will solve so many problems: cd ssl/certs; for pem in *.pem; do ssl-cert-check -a -x 15 -e admin@yourdomain.com -q -c $pem; done [imagine a grumpy "silly companies with millions of dollars in funding, no actual processes, and too little systems knowledge" rant here. it's like a racecar driver who's team let…

I wish it was only an issue that occurs in such cases. Unfortunately, this kind of stupidity happen TWICE in a row in a company I worked for previously. The developpers told the manager litterally MONTHS ago, but it was just not considered as important enough. (Eh, if I click on "Approve" it works, so what the big deal?!)

Re: Parse is down due to SSL certificate expiry

#28
post #17

This is why I think its always good to build your apps in the 'Good old way', instead of relying on a third party like Parse. It becomes a bottle-neck in situations like these, where in you are kind of stuck - Either, you will have to re-write your code from scratch, or wait for them to fix it, with a lot of uncertainty.

The devil you know, right?

Re: Parse is down due to SSL certificate expiry

#29
post #17

This is why I think its always good to build your apps in the 'Good old way', instead of relying on a third party like Parse. It becomes a bottle-neck in situations like these, where in you are kind of stuck - Either, you will have to re-write your code from scratch, or wait for them to fix it, with a lot of uncertainty.

Is there any value in companies like Parse selling their software as installable on your own servers (i.e., GitHub Enterprise).

I ask, rhetorically, because I built a somewhat competing service that isn't doing too well and I'm looking to make it so you can install it on your own servers.

Post reply on HN