76
submitted 1 year ago by bigredcar@lemmy.world to c/linux@lemmy.world

It's breaking the access to the website and not a good look for the "app store for Linux". A lesson in central points of failure?

top 16 comments
sorted by: hot top controversial new old
[-] olympicyes@lemmy.world 14 points 1 year ago

https://www.flathub.org is using Let’s encrypt. Their certs only last 90 days so you need a script to make sure they are updated and pushed to your site. https://flathub.org uses Globalsign which lasts for 13 months. My guess is they don’t have a process for reconciling the two types of end dates.

[-] ebits21@lemmy.ca 1 points 1 year ago

It’s not hard to automate? I remember when Firefox had this same flub, lol

[-] Unquote0270@programming.dev 4 points 1 year ago

Even just manually, how hard is it to put a reminder in a calendar somewhere? I've never understood how/why this happens, it's really but difficult.

[-] Molecular0079@lemmy.world 1 points 1 year ago

You don't even need to automate. Certbot comes with a systemd timer called certbot-renew.timer which does this for you.

[-] SpaceNoodle@lemmy.world 7 points 1 year ago

Well that instills confidence

[-] stepbro@lemmy.world 6 points 1 year ago

FWIW .... it is fixed now.

[-] bigredcar@lemmy.world 14 points 1 year ago

It's broken on the www.flathub.org domain but not on just flathub.org by itself. Despite browsers trying to get rid of www its still commonly used.

Yeah, it isn't a good look for flathub. I looked at the certificate and the Subject Alternative Names section was missing the www prefix. Why they're not using Let's Encrypt and certbot beats me because this could all be automated.

[-] ebits21@lemmy.ca 5 points 1 year ago

So basic. Even I had it automated for my personal wedding website. Lol.

I use the DNS-01 challenge to take advantage of wildcard certs. Every 30 days, I have a cron job force a renewal, send a SIGHUP to nginx and I am back in biz. Ez-pezy

[-] titey@lemmy.home.titey.net 1 points 1 year ago

Same here, just works!

[-] CaptainBasculin@lemmy.ml 2 points 1 year ago

It's not expired for me rn, so is this something that happened before?

[-] FermatsLastAccount@kbin.social 1 points 1 year ago

Did you go on flathub.org or www.flathub.org? The certs are fine on the former, but expired on the latter.

[-] kbity@kbin.social 2 points 1 year ago

And it's still less shit than Snaps. It's the giant douche and turd sandwich situation with this stuff.

Ummm ... oops? 🤷‍♂️ 😆

this post was submitted on 20 Jul 2023
76 points (100.0% liked)

Linux

8090 readers
12 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 1 year ago
MODERATORS