Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #219775 > unrolled thread

[OT] JFYI: Lets Encrypt CAA bug, how to check certificate

Back to article view | Back to linux.debian.user

Contents

  [OT] JFYI: Lets Encrypt CAA bug, how to check certificate Didar Hossain <didar@purlo.in> - 2020-03-04 16:20 +0100
    Re: [OT] JFYI: Lets Encrypt CAA bug, how to check certificate Nate Bargmann <n0nb@n0nb.us> - 2020-03-04 18:40 +0100

#219775 — [OT] JFYI: Lets Encrypt CAA bug, how to check certificate

Hi,

This post is informational:

Lets Encrypt discovered a bug in their CA software (boulder) related to CAA
checking code. They have decided to revoke a subset of certificates issued on
March 4, 2020.

More information:
https://arstechnica.com/information-technology/2020/03/lets-encrypt-revoking-https-certs-due-to-certificate-authority-bug/

If you are using letsencrypt certificate(s) as I am, here is a way to check
whether you are affected -

curl -d 'fqdn=example.com' https://unboundtest.com/caaproblem/checkhost

* replace "example.com" with your own domain(s).

Found the helpful command from the comments on slashdot about this issue.

Kind regards,
Didar

-- 
The odds are a million to one against your being one in a million.

[toc] | [next] | [standalone]

#219791

[Multipart message — attachments visible in raw view] — view raw

Thanks for passing that along,  Didar.  It shows my cert is OK as well.

- Nate

-- 

"The optimist proclaims that we live in the best of all
possible worlds.  The pessimist fears this is true."

Web: https://www.n0nb.us
Projects: https://github.com/N0NB
GPG fingerprint: 82D6 4F6B 0E67 CD41 F689 BBA6 FB2C 5130 D55A 8819

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web