archive snowblossom slack mining
prev 2019-04-13 next
2019-04-13 09:22:34
fydel
thanks. i will ask you guys if i get stuck.
2019-04-13 14:55:26
fydel
i think it worked.
2019-04-13 15:27:02
Rotonen
yes, but http does not force you onto https yet
2019-04-13 15:30:45
Rotonen
TLS config looks good too
2019-04-13 15:31:11
Rotonen
a good idea to run that quarterly to see if anything bumps you down to C
2019-04-13 15:31:30
Rotonen
for practical purposes, B and up is good enough
2019-04-13 15:32:12
Rotonen
i guess you use some configuration wizard, probably the letsencrypt client from the distro repos
2019-04-13 15:58:31
fydel
thanks.
2019-04-13 15:58:35
fydel
yes i do.
2019-04-13 15:59:39
fydel
okay.
2019-04-13 16:08:22
Rotonen
then you do not need to worry about keeping up with nuances and obscuria
2019-04-13 16:08:33
fydel
yay!!
2019-04-13 16:08:52
Rotonen
letsencrypt has a paid team of engineering staff and their autopilot keeps your config sane
2019-04-13 16:09:11
Rotonen
just make sure you have it in a crontab
2019-04-13 16:09:45
Rotonen
dunno if that adds itself, actually, but worth double checking
2019-04-13 16:09:58
Rotonen
the LE certs are 90 day DV certs
2019-04-13 16:10:16
Rotonen
and 90 days rolls over surprisingly quick
2019-04-13 16:10:34
fydel
okay. thanks for the info.
2019-04-13 16:12:39
Rotonen
i use this one, but i like single purpose tools and staying on top of the whole stack is a thing for me - posting that in case someone else likeminded is seeking an ACME client (there are also valid single purpose rust and go clients for those so inclined) https://github.com/zenhack/simp_le Simple Let's Encrypt client
2019-04-13 16:54:01
Rotonen
relatedly mozilla has a nice tool they keep up to date https://mozilla.github.io/server-side-tls/ssl-config-generator/
2019-04-13 16:55:01
Rotonen
i guess it is time for me to drop TLSv1.1 at this point