Add TLSA record for all subdomains #676

New Issue

Closed

opened 2023-10-25 17:23:00 +02:00 by muppeth · 2 comments

muppeth commented

2023-10-25 17:23:00 +02:00

Owner

In light of the recent blog post https://notes.valdikss.org.ru/jabber.ru-mitm/ unfolding MITM attack commited by Hetzner/Linode on one of the xmpp servers, we decided to add some protection to our certificates. Adding TLSA records for all subdomains:

Update letencrypt role with reuse-key = true option
Update all certs

In light of the recent blog post https://notes.valdikss.org.ru/jabber.ru-mitm/ unfolding MITM attack commited by Hetzner/Linode on one of the xmpp servers, we decided to add some protection to our certificates. Adding TLSA records for all subdomains: - Update letencrypt role with `reuse-key = true` option - Update all certs

muppeth added this to the 23.11 - November milestone 2023-10-25 17:23:00 +02:00

muppeth commented

2023-11-07 02:17:14 +01:00

Author

Owner

Working on it. Need to test the changes to the role before pushing.

Working on it. Need to test the changes to the role before pushing.

muppeth modified the milestone from 23.11 - November to 23.12 - December

2023-12-03 13:55:44 +01:00

muppeth commented

2023-12-17 00:08:05 +01:00

Author

Owner

Renewed all the keys so we should be able to do it now. I will test on some subdomains first and then do it for all.

Renewed all the keys so we should be able to do it now. I will test on some subdomains first and then do it for all.

muppeth closed this issue

2024-01-04 01:56:47 +01:00

Sign in to join this conversation.

No Label

Feature request

🤔️ Investigate

spam-protection

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Disroot/Disroot-Project#676

No description provided.