SSL certificate has expired

tenex / rails-assets

The solution to assets management in Rails

https://rails-assets.org

MIT License

1.63k stars 69 forks source link

SSL certificate has expired #416

Closed pwim closed 6 years ago

pwim commented 6 years ago

The SSL certificate for rails-assets.org has expired (it expired at 2017-12-05 03:00:00 UTC).

alexssung commented 6 years ago

this is blocking deployment

g3ortega commented 6 years ago

Same here! We have a presentation, and we can't deploy to staging :smile:

alexssung commented 6 years ago

You can temporarily change your Gemfile to use http://insecure.rails-assets.org/ if it's an emergency

g3ortega commented 6 years ago

Cool, thanks for the tip @alexssung :+1:

lakehouseru commented 6 years ago

+1 !

artiommocrenco commented 6 years ago

Bad suggestion, @alexssung .

Better wait for the certificate to be renewed to avoid MitM attacks.

artiommocrenco commented 6 years ago

@hut8 @sheerun

jordiclariana commented 6 years ago

Another nasty trick to avoid the problem (but insecure if you don't rely in expired certificates): I installed an Nginx and configured this server:

server {
  listen 80;
  location / {
    proxy_set_header Host rails-assets.org;
    proxy_pass https://rails-assets.org;
  }
}

Then instruct bundle to point to the Nginx: bundle config --local mirror.https://rails-assets.org/ http://localhost/

It works now, but as I said: not 100% secure.

mansoorelahi commented 6 years ago

+1 !

RonaldDijkstra commented 6 years ago

+1!

avokhmin commented 6 years ago

@joshjordan , @hut8 , @tenex Houston, we have a problems

dkhgh commented 6 years ago

it's 04:50am at the Tenex office right now Calling their office (1-833-TENEX10) doesn't work from here (NL).

artiommocrenco commented 6 years ago

There is a certain amount of pleasure associated with the moment when everyone in the world is waiting until you renew your SSL certificate. :smile:

Br3nda commented 6 years ago

Put certbot in cron and this can just not happen. https://certbot.eff.org

thromera commented 6 years ago

After this is fixed, we should definitely think at how to alleviate those kind of critical issues (@Br3nda solution could work I believe).

mynameiswillporter commented 6 years ago

Hey everyone, I think I was just able to renew the SSL certificate. Sorry for everyone affected by the outage. I think it makes sense to automate the renewal of the certificate to try and prevent this in the future, but as I am relatively unfamiliar with this project I would like to discuss further @joshjordan during normal business hours. Its not yet 6:00 am.

murdoch commented 6 years ago

@mynameiswillporter I can confirm this is fixed for me, my bundle install runs fine now. Well done. Thanks.

mynameiswillporter commented 6 years ago

Great! Thanks @murdoch

fs-watanabe-noriyuki commented 6 years ago

Close ok?

pwim commented 6 years ago

My original issue was resolved. Looks like it happened again in #419, so hopefully the maintainers have taken some steps to prevent the certs from expiring again.