Let's Encrypt

by Volker Weber


As part of the move, vowe.net also goes https. All web traffic should be encrypted.

The plumbing is already perfect, but there were kinks in the code. Mostly in the code that I have written a long time ago. Let me know if you see things that are broken.



and http2. It was about time ;-)

At least on my side there are some http links left over for comments
form method="post" action="http://vowe.net/cgi-bin/mt-cmmnt.cgi" name="

Hagen Bauer, 2017-01-04

Deine DuckDuckGo-Search läuft noch über HTTP.

René Winkelmeyer, 2017-01-04

Work in progress, work in progress. We do it old school and develop on the live site. :-)

Volker Weber, 2017-01-04

Everybody has a testing environment. Some people are lucky enough enough to have a totally separate environment to run production in. :-)

Daniel Meyer, 2017-01-04

@Daniel We're in a bit of a hurry here and I don't have that many spare servers anymore ;) Forms should now be secure, btw.

Stefan Rubner, 2017-01-04

Thanks for understanding, Daniel.

Volker Weber, 2017-01-04

Nice move!

Ingo Seifert, 2017-01-04

We should be good now. Please comment if you see things that are broken.

Volker Weber, 2017-01-04

Would be interested what tooling you used for the letsencrypt certificates mechanics.

Stephan H. Wissel, 2017-01-05

A simple manual initial request using certbot and an automated refresh setup using Jenkins in the backend and a bit of nginx config magic on the frontend.

Stefan Rubner, 2017-01-05

Hier steckt noch ein HTTP-Link:

Mixed Content: The page at 'https://vowe.net/contact.php' was loaded over HTTPS, but requested an insecure image 'http://vowe.net/assets/qrlink2vcard.png'. This content should also be served over HTTPS.

Enrico Lippmann, 2017-01-05

Danke, Enrico.

Volker Weber, 2017-01-05

http-link auf about.php jeweils in den "by Volker Weber" links unter den Überschriften, auch wenn sie dann auf https umgeleitet werden.

Markus Jabs, 2017-01-05

Fixed, danke Markus.

Stefan Rubner, 2017-01-05

ich bin mir nicht sicher, ob das vorher ging, aber www.vowe.net läuft ins Leere

Samuel Orsenne, 2017-01-05

@Samuel: Ich lande auf der Homepage...

Bernd Schuster, 2017-01-06

Old vowe.net archive pages

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.


Paypal vowe