Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Noel Butler
On 30/10/2018 09:29, Noel Butler wrote: > On 30/10/2018 03:18, Bill Cole wrote: > On 29 Oct 2018, at 12:41, Jim Popovitch via mailop wrote: > > N.B. please don't CC me, I'm subscribed to the list. > I normally wouldn't, but your posts all have this header: > > Reply-To: Jim Popovitch > > Per

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Noel Butler
On 30/10/2018 03:18, Bill Cole wrote: > On 29 Oct 2018, at 12:41, Jim Popovitch via mailop wrote: > >> N.B. please don't CC me, I'm subscribed to the list. > > I normally wouldn't, but your posts all have this header: > > Reply-To: Jim Popovitch > > Perhaps that's being added by Mailman for s

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Noel Butler
On 29/10/2018 19:44, Frands Bjerring Hansen wrote: > Noel, > > LE does not insist on certbot. They recommend it, and why wouldn't they? :) > > Use acme.sh instead if you are not able adhere to the requirements of > Certbot. Acme.sh requires nothing but sh. > > Also, it seems like you did not

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Jim Popovitch via mailop
On Mon, 2018-10-29 at 13:18 -0400, Bill Cole wrote: > On 29 Oct 2018, at 12:41, Jim Popovitch via mailop wrote: > > > N.B. please don't CC me, I'm subscribed to the list. > > I normally wouldn't, but your posts all have this header: > >    Reply-To: Jim Popovitch > > Perhaps that's being added

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Bill Cole
On 29 Oct 2018, at 12:41, Jim Popovitch via mailop wrote: > N.B. please don't CC me, I'm subscribed to the list. I normally wouldn't, but your posts all have this header: Reply-To: Jim Popovitch Perhaps that's being added by Mailman for some reason... __

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Jim Popovitch via mailop
On Mon, 2018-10-29 at 12:32 -0400, Bill Cole wrote: > On 29 Oct 2018, at 10:40, Jim Popovitch via mailop wrote: > > > You allow nsupdate from your cgi/php/java enabled webserver(s)? > > My **what?*** Are you high? Do you mean to be insulting??? Of course not. I only asked a simple question. Yo

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Bill Cole
On 29 Oct 2018, at 10:40, Jim Popovitch via mailop wrote: You allow nsupdate from your cgi/php/java enabled webserver(s)? My **what?*** Are you high? Do you mean to be insulting??? But no, I don't run anything on my webserver that modifies its own DNS. Although I would be vulnerable in theor

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Dave Brockman
On 10/29/2018 11:48 AM, Jim Popovitch via mailop wrote: > On Mon, 2018-10-29 at 11:31 -0400, Dave Brockman wrote: >> On 10/29/2018 10:40 AM, Jim Popovitch via mailop wrote: >>> You allow nsupdate from your cgi/php/java enabled webserver(s)?   >>> >>> -Jim P. >> >> No, the whole point of using acme.

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Jim Popovitch via mailop
On Mon, 2018-10-29 at 11:31 -0400, Dave Brockman wrote: > On 10/29/2018 10:40 AM, Jim Popovitch via mailop wrote: > > You allow nsupdate from your cgi/php/java enabled webserver(s)?   > > > > -Jim P. > > No, the whole point of using acme.sh and the nsupdate module is to > avoid running a web serv

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Dave Brockman
On 10/29/2018 10:40 AM, Jim Popovitch via mailop wrote: > You allow nsupdate from your cgi/php/java enabled webserver(s)? > > -Jim P. No, the whole point of using acme.sh and the nsupdate module is to avoid running a web server. You can also run LE with a webserver that doesn't support cgi, ph

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Jim Popovitch via mailop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Mon, 2018-10-29 at 09:52 -0400, Bill Cole wrote: > On 29 Oct 2018, at 5:44, Frands Bjerring Hansen wrote: > > > Noel,  > > > > LE does not insist on certbot. They recommend it, and why wouldn't  > > they? :)  > > > > Use acme.sh instead if you

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Bill Cole
On 29 Oct 2018, at 5:44, Frands Bjerring Hansen wrote: Noel,  LE does not insist on certbot. They recommend it, and why wouldn't they? :)  Use acme.sh instead if you are not able adhere to the requirements of Certbot. Acme.sh requires nothing but sh. Also, it seems like you did not proper

Re: [mailop] Expires SSL cert for mailop

2018-10-29 Thread Frands Bjerring Hansen
From: mailop on behalf of Noel Butler Sent: Saturday, October 27, 2018 4:29 AM To: mailop@mailop.org Subject: Re: [mailop] Expires SSL cert for mailop   On 27/10/2018 04:40, Thomas Walter wrote: Hey Mark, On 26.10.18 17:34, Mark Milhollan wrote: Let's Encrypt changes little, proc

Re: [mailop] Expires SSL cert for mailop

2018-10-27 Thread Mike Hammett
Exchange The Brothers WISP - Original Message - From: "Tylor Newman via mailop" To: "Dave Warren" , mailop@mailop.org Sent: Saturday, October 27, 2018 7:22:45 AM Subject: Re: [mailop] Expires SSL cert for mailop Very well said, Dave. I was going to send a mor

Re: [mailop] Expires SSL cert for mailop

2018-10-27 Thread Tylor Newman via mailop
reason not to be using it. Tylor Newman Linux Systems Administrator Email: <mailto:tylo...@tylor.me> tylo...@tylor.me From: Dave Warren Sent: Friday, October 26, 2018 11:26 PM To: mailop@mailop.org Subject: Re: [mailop] Expires SSL cert for mailop On Fri, Oct 26, 2018, at

Re: [mailop] Expires SSL cert for mailop

2018-10-26 Thread Dave Warren
On Fri, Oct 26, 2018, at 19:29, Noel Butler wrote: > Problem with letsencrypt is their preferred and insisted " certbot " > - does not run (easily at least) on all flavours..> I gave up with it on > slackware which is what my servers run, tried > using Crypt::LE and voila instant success, it was p

Re: [mailop] Expires SSL cert for mailop

2018-10-26 Thread Noel Butler
On 27/10/2018 04:40, Thomas Walter wrote: > Hey Mark, > > On 26.10.18 17:34, Mark Milhollan wrote: > >> Let's Encrypt changes little, processes can break whether they are >> yearly, bi-yearly or monthly. Granted you'd think there would be >> monitoring and then reasonably quick restoration.

Re: [mailop] Expires SSL cert for mailop

2018-10-26 Thread Thomas Walter
Hey Mark, On 26.10.18 17:34, Mark Milhollan wrote: > Let's Encrypt changes little, processes can break whether they are > yearly, bi-yearly or monthly. Granted you'd think there would be > monitoring and then reasonably quick restoration. Let's Encrypt automates the whole process and in case t

Re: [mailop] Expires SSL cert for mailop

2018-10-26 Thread Mark Milhollan
On Thu, 25 Oct 2018, Doug Barton wrote: >In the age of Let's Encrypt expired TLS certs are a really bad look. Let's Encrypt changes little, processes can break whether they are yearly, bi-yearly or monthly. Granted you'd think there would be monitoring and then reasonably quick restoration.

Re: [mailop] Expires SSL cert for mailop

2018-10-26 Thread Mike Hammett
y, October 25, 2018 11:11:04 PM Subject: Re: [mailop] Expires SSL cert for mailop http://chilli.nosignal.org won't be using any cert (: October 26, 2018 4:58 PM, "Doug Barton" wrote: > Y'all might want to be aware that this issue is being discussed on the NANOG >

Re: [mailop] Expires SSL cert for mailop

2018-10-25 Thread steve
http://chilli.nosignal.org won't be using any cert (: October 26, 2018 4:58 PM, "Doug Barton" wrote: > Y'all might want to be aware that this issue is being discussed on the NANOG > list. In the age of > Let's Encrypt expired TLS certs are a really bad look. > > On 9/12/18 6:24 AM, Matt Gilber

Re: [mailop] Expires SSL cert for mailop

2018-10-25 Thread Doug Barton
Y'all might want to be aware that this issue is being discussed on the NANOG list. In the age of Let's Encrypt expired TLS certs are a really bad look. On 9/12/18 6:24 AM, Matt Gilbert via mailop wrote: Hey gang, I was showing mailop to a new member of my team, and when I went to show them w

Re: [mailop] Expires SSL cert for mailop

2018-09-12 Thread Daniel Hadfield
Perfect time to move to Let's Encrypt :D ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Expires SSL cert for mailop

2018-09-12 Thread Mike Hammett
Those errors have gotten so easy to ignore since you're going to have that whenever you access any piece of infrastructure. https://en.wikipedia.org/wiki/The_Boy_Who_Cried_Wolf Server side, though, Let's Encrypt and be done. - Mike Hammett Intelligent Computing Solutions Midwest I