Infrastructure

Muhammet Kara wrote:

I appreciate if you could add the feed for https://muhammetkara.com/ to TDF planet: https://muhammetkara.com/tags/planet-tdf/index.xml

FYI the leaf X.509 cert is expired since April 23

$ openssl s_client -connect muhammetkara.com:443 -servername muhammetkara.com </dev/null 2>/dev/null \
| openssl x509 -noout -subject -issuer -dates
subject=CN = muhammetkara.com
issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
notBefore=Jan 23 19:29:34 2018 GMT
notAfter=Apr 23 19:29:34 2018 GMT

Our aggregate feed generator refuses to connect to sites with an "unverified" X.509 chain. I see that you also serve content over plain http://, so I demoted your entry from https:// to http://.

Guilhem Moulin wrote:

Muhammet Kara wrote:

I appreciate if you could add the feed for https://muhammetkara.com/ to TDF planet: https://muhammetkara.com/tags/planet-tdf/index.xml

FYI the leaf X.509 cert is expired since April 23

[...]

Our aggregate feed generator refuses to connect to sites with an "unverified" X.509 chain. I see that you also serve content over plain http://, so I demoted your entry from https:// to http://.

Oh. I have just renewed the certificate. Thanks for letting me know! :)

Muhammet Kara wrote:

Oh. I have just renewed the certificate. Thanks for letting me know! :)

You're welcome. I see that you now have a 301 redirect from http:// to https:// so downgrading the connection to plaintext won't be an option if the issue happens again. Please try to renew your certs in time :-)

Guilhem Moulin wrote:

Muhammet Kara wrote:

Oh. I have just renewed the certificate. Thanks for letting me know! :)

You're welcome. I see that you now have a 301 redirect from http:// to https:// so downgrading the connection to plaintext won't be an option if the issue happens again. Please try to renew your certs in time :-)

I'll keep that in mind. ;)

Thanks again!