J.C. Jones
J.C. Jones
Consul 1.14 added support for Cluster Peering, and the new [`peer` parameter for the `/health` API endpoint](https://developer.hashicorp.com/consul/api-docs/health#peer) to access imported services. It would be natural for consul-template to support the...
Let's Encrypt is enabling [asynchronous order finalization](https://community.letsencrypt.org/t/openresty-with-resty-auto-ssl-failing-with-curl-error-3/195924/8) which is [supported by Dehydrated](https://github.com/dehydrated-io/dehydrated/commit/58bd926e30eb3f298b65d0b96efb58cf81a5fd93), but only more recent versions. Until Dehydrated is updated to 0.7.1 or later, AutoSSL will fail with an...
The Let's Encrypt API (overall, through a combination of Boulder and the load balancers) returns code 503 when the servers are overloaded, and code 429 when a given client is...
We're occasionally seeing unbound 1.13.1 (and 1.13.0 and 1.13.1rc1) hang, taking all available CPU time and no longer servicing queries. Because of automated watchdog mechanisms it's taken me a while...
### Proposal In Terraform `plan` and `apply` diff output, when [a string evaluated looks like JSON](https://github.com/hashicorp/terraform/blob/4b2b34929de1f93f02804fddf2432984c62d1514/internal/command/jsonformat/computed/renderers/string.go#L32-L40), the [renderer calls a function `renderStringDiffAsJson` which pretty-prints the output](https://github.com/hashicorp/terraform/blob/4b2b34929de1f93f02804fddf2432984c62d1514/internal/command/jsonformat/computed/renderers/primitive.go#L189). It would be lovely...
Set a deadline per-issuer in aggregate-crls that if revocation data isn't acquired by the deadline, the issuer is not enrolled in CRLite. _Originally posted by @jcjones in https://github.com/mozilla/crlite/issues/43#issuecomment-730548932_
If the signer task doesn't run for some time, the bucket in Kinto can end up with many stashes waiting to be signed. Right now it fails indicating that the...
The publisher tool operates in four stages, and not in a transaction, which raises concerns as to what happens when it does not update in a consistent way. The possibilities...
I wonder if we want to verify that anything that was in the old set but isn't in the new set has expired? _Originally posted by @mozkeeler in https://github.com/mozilla/crlite/pull/48_ This...
RFC 5280 defines an extension `CRLReason`: ``` id-ce-cRLReasons OBJECT IDENTIFIER ::= { id-ce 21 } CRLReason ::= ENUMERATED { unspecified (0), keyCompromise (1), cACompromise (2), affiliationChanged (3), superseded (4), cessationOfOperation...