Groups > linux.debian.user > #219775

[OT] JFYI: Lets Encrypt CAA bug, how to check certificate

From	Didar Hossain <didar@purlo.in>
Newsgroups	linux.debian.user
Subject	[OT] JFYI: Lets Encrypt CAA bug, how to check certificate
Date	2020-03-04 16:20 +0100
Message-ID	<zGDYu-6AY-7@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

This post is informational:

Lets Encrypt discovered a bug in their CA software (boulder) related to CAA
checking code. They have decided to revoke a subset of certificates issued on
March 4, 2020.

More information:
https://arstechnica.com/information-technology/2020/03/lets-encrypt-revoking-https-certs-due-to-certificate-authority-bug/

If you are using letsencrypt certificate(s) as I am, here is a way to check
whether you are affected -

curl -d 'fqdn=example.com' https://unboundtest.com/caaproblem/checkhost

* replace "example.com" with your own domain(s).

Found the helpful command from the comments on slashdot about this issue.

Kind regards,
Didar

-- 
The odds are a million to one against your being one in a million.

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[OT] JFYI: Lets Encrypt CAA bug, how to check certificate Didar Hossain <didar@purlo.in> - 2020-03-04 16:20 +0100
  Re: [OT] JFYI: Lets Encrypt CAA bug, how to check certificate Nate Bargmann <n0nb@n0nb.us> - 2020-03-04 18:40 +0100

csiph-web