Update, April 28, 2019: Warning: I don't think that this works. A few days after getting this setup, HTTPS broke on a few of my sites and I had to undo this config. I haven't had enough time to poke at things, but JJJ pinged me yesterday and said he was having issues to. I hope to get back to this soon, but for now—beware! :)
Posts
For things with titles.
Managing SSL certificates and HTTPS configuration at scale
Our multi-network multisite WordPress installation at WSU has 1022 sites spread across 342 unique domain names. We have 481 SSL certificates on the server to help secure the traffic to and from these domains. And we have 1039 unique server blocks in our nginx configuration to help route that traffic. Configuring a site for HTTPS is […]
My first Let’s Encrypt certificate
The timing of the Let’s Encrypt beta could not be more perfect as my previous certificate expires on November 18th. I purposely purchased only a 1 year certificate because I knew Let’s Encrypt was coming. Let’s see how this works! 6:00pm In my email, I have an invite to Let’s Encrypt for 3 whitelisted domains—jeremyfelt.com, […]
OpenSSL commands that came in useful today
When nginx -t complained about a certificate/key mismatch this afternoon, I first assumed that the problem was on our end during our automated CSR/key generation or our certificate request process. I took a closer look at all three pieces to look for the source of the error using “The Most Common OpenSSL Commands“: openssl rsa -in […]
SSL remains fairly terrifying
Moxie Marlinspike‘s presentation on SSL Stripping, while 5 years old, is both fascinating and terrifying. I’m not sure I’ll ever turn my secure VPN off again. At the same time, I’m not sure if it really does me any good. The 55 minutes of his talk are very much worth it. Some moments from the video: […]
