Let's Encrypt

by Volker Weber

ZZ78303071

As part of the move, vowe.net also goes https. All web traffic should be encrypted.

The plumbing is already perfect, but there were kinks in the code. Mostly in the code that I have written a long time ago. Let me know if you see things that are broken.

ZZ680F1125

Comments

and http2. It was about time ;-)

At least on my side there are some http links left over for comments
form method="post" action="http://vowe.net/cgi-bin/mt-cmmnt.cgi" name="

Hagen Bauer, 2017-01-04 15:18

Deine DuckDuckGo-Search läuft noch über HTTP.

René Winkelmeyer, 2017-01-04 15:18

Work in progress, work in progress. We do it old school and develop on the live site. :-)

Volker Weber, 2017-01-04 15:25

Everybody has a testing environment. Some people are lucky enough enough to have a totally separate environment to run production in. :-)

Daniel Meyer, 2017-01-04 15:34

@Daniel We're in a bit of a hurry here and I don't have that many spare servers anymore ;) Forms should now be secure, btw.

Stefan Rubner, 2017-01-04 15:36

Thanks for understanding, Daniel.

Volker Weber, 2017-01-04 15:47

Nice move!

Ingo Seifert, 2017-01-04 17:46

We should be good now. Please comment if you see things that are broken.

Volker Weber, 2017-01-04 18:38

Would be interested what tooling you used for the letsencrypt certificates mechanics.

Stephan H. Wissel, 2017-01-05 01:46

A simple manual initial request using certbot and an automated refresh setup using Jenkins in the backend and a bit of nginx config magic on the frontend.

Stefan Rubner, 2017-01-05 02:27

Hier steckt noch ein HTTP-Link:

Mixed Content: The page at 'https://vowe.net/contact.php' was loaded over HTTPS, but requested an insecure image 'http://vowe.net/assets/qrlink2vcard.png'. This content should also be served over HTTPS.

Enrico Lippmann, 2017-01-05 07:42

Danke, Enrico.

Volker Weber, 2017-01-05 09:55

http-link auf about.php jeweils in den "by Volker Weber" links unter den Überschriften, auch wenn sie dann auf https umgeleitet werden.

Markus Jabs, 2017-01-05 12:35

Fixed, danke Markus.

Stefan Rubner, 2017-01-05 12:55

ich bin mir nicht sicher, ob das vorher ging, aber www.vowe.net läuft ins Leere

Samuel Orsenne, 2017-01-05 23:02

@Samuel: Ich lande auf der Homepage...

Bernd Schuster, 2017-01-06 10:10

Post a comment

Store next two fields in a cookie for you?




Use your full name and a working email address. Unless you want your comment to be removed. No kidding.

Recent comments

Susan Bulloch on I miss these people at 02:26
Volker Weber on I miss these people at 21:56
Alan Lepofsky on I miss these people at 21:55
Volker Weber on I miss these people at 21:35
Susan Bulloch on I miss these people at 21:34
Thomas Duff on I miss these people at 20:44
Chris Coates on I miss these people at 20:37
Bill Buchan on I miss these people at 20:35
Paul Mooney on I miss these people at 20:26
sean cull on I miss these people at 13:09
Erik Ferrari on I miss these people at 10:50
Andrew Pollack on I miss these people at 03:40
Stephan H. Wissel on I miss these people at 01:46
Volker Weber on I miss these people at 21:31
Darren Duke on I miss these people at 17:43
Volker Weber on Stupid is who stupid does at 16:15
Chris Lindley on Stupid is who stupid does at 16:06
Jürgen Sting on Fataler Konstruktionsfehler im besonderen elektronischen Anwaltspostfach at 11:33
Jérôme RAUCH on Impulse buy of the day at 02:48
Armin Grewe on Stupid is who stupid does at 00:51
Ingo Seifert on Impulse buy of the day at 00:38
Volker Weber on Stupid is who stupid does at 22:43
Craig Wiseman on Stupid is who stupid does at 20:01
Volker Weber on Stupid is who stupid does at 17:01
Kai Schmalenbach on Stupid is who stupid does at 16:49

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter

Local time is 05:32

visitors.gif