6 ms·
The TLS cert expires on December 12.
by fotta 4y ago
The TLS cert expires on December 12.
- post_break 4y agoOh man I just smiled like the Grinch.
- gonzo41 4y agoI had a job once, when TLS was new and half the internet was not using some form of SSL. We had to manually do keyswaps on a stack of machines to create a trust network for all the certs. IT really sucked. I made a note of the certificate expiry data and a calendar reminder 3 years into the future to start looking for a new job if I hadn't already.
- 3-cheese-sundae 4y agoHopefully that reminder never slipped pasta your attention.
- gonzo41 4y agoYeah!, for context, I saw and fixed that spelling mistake of calendar / colander. This week really has been a wild ride. Can't text fast enough.
- nothrowaways 4y agoI hope you don't end up in a job where someone left on cert calendar reminder.
- dilyevsky 4y agoThere is absolutely no way in hell those aren’t autorenewed. I think the answer is “quite a long time” actually. Eventually disk/machine rot in DCs will take over but it can take many months or more
- SoftTalker 4y agoEverything I run at work is 5-10 years old or older. It all just hums along. Occasionally I replace a hard drive or a power supply.
- sockgrant 4y agoYou get massive DoS attacks pretty regularly? State sponsored hackers?
- kccoder 4y agoNow multiply that frequency against the ratio of machines Twitter has vs you.
- XorNot 4y agoOn a modest Hadoop cluster of 300 machines with 20 disks a piece, we replaced 3 hard disks a week.
- dilyevsky 4y agoSpindles? That sounds like a ridiculous amount burn rate - it should be no more than 5-10% a YEAR. Backblaze reports only 1.6% quarterly failure rate https://www.backblaze.com/b2/hard-drive-test-data.html https://www.backblaze.com/b2/hard-drive-test-data.html
- dilyevsky 4y agoEr actually missed its total 6k disks seems about right then
- matwood 4y ago
- dragontamer 4y agoThe certificate looks like it was created on Nov 14th and is valid until Nov 14th 2023 to me.
- fotta 4y agoYeah it looks like they rotated it. It used to be this one: https://crt.sh/?q=DA26F72EACAC75CCEE794140441020848697AEB0 https://crt.sh/?q=DA26F72EACAC75CCEE794140441020848697AEB0 The new one isn’t even indexed on crt.sh yet.
- herpderperator 4y agoMy browser said that too, but that certificate may be cached from a while ago. The terminal gives a different set of dates: $ openssl s_client -servername twitter.com -connect twitter.com:443 2>/dev/null | openssl x509 -noout -dates notBefore=Nov 14 00:00:00 2022 GMT notAfter=Nov 14 23:59:59 2023 GMT Edit: Opening my browser in incognito now shows the new expiry too. The non-incognito version continues to show the old expiry.
- fotta 4y agoI think they rotated it. The new one isn’t in crt.sh yet, but for posterity’s sake this is the old one https://crt.sh/?q=DA26F72EACAC75CCEE794140441020848697AEB0 https://crt.sh/?q=DA26F72EACAC75CCEE794140441020848697AEB0
- deleted 4y ago[deleted]