[as112-ops] SSL certificate for 'as112.net' expired

Alarig Le Lay alarig at swordarmor.fr
Mon Oct 29 14:18:41 UTC 2018


On lun. 29 oct. 09:52:10 2018, Matthew Pounsett wrote:
> Gack!  Sorry about that.. fixed now.
> 
> 
> Matt Pounsett
> DNS-OARC Systems Engineering

The TLSA is invalid.

alarig at bulbizarre ~ $ dig -t TLSA _443._tcp.www.as112.net

; <<>> DiG 9.11.2-P1 <<>> -t TLSA _443._tcp.www.as112.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22973
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;_443._tcp.www.as112.net.       IN      TLSA

;; ANSWER SECTION:
_443._tcp.www.as112.net. 300    IN      TLSA    3 0 1 16BF35720C729681608563C7AFBD6AAAED0F82BA5ABE73934BE9DEB5 42C2F08B

;; Query time: 383 msec
;; SERVER: 2a01:cb08:898c:fc00::1#53(2a01:cb08:898c:fc00::1)
;; WHEN: Mon Oct 29 15:11:36 CET 2018
;; MSG SIZE  rcvd: 99

alarig at bulbizarre ~ $ openssl s_client -connect www.as112.net:443 2>/dev/null | openssl x509 -outform DER | openssl sha256 | awk '/stdin/ { print $2 }'
f1342b6908c949dd41cc961e50d90c7aa2e340ccf668e91702bb73049063353b


Could you please update it?

Regards,
-- 
Alarig


More information about the as112-ops mailing list