Lmst
Login

#certificates

Linuxiaclinuxiac
2026-02-22

With DNS-PERSIST-01, Let’s Encrypt users can validate their domains without having to update DNS records every time they issue or renew a certificate.
linuxiac.com/lets-encrypt-intr

With DNS-PERSIST-01, Let’s Encrypt users can validate their domains without having to update DNS records every time they issue or renew a certificate.
Sami Lehtinensl@pleroma.envs.net
2026-02-22

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks

#ZeroSSL #EuropeanAlternatives #TLS #Validation #Certificates #LetsEncrypt

Inautiloinautilo
2026-02-20


DNS-PERSIST-01 · A new model for DNS-based challenge validation ilo.im/16aqtz

_____

AskUbuntuaskubuntu@ubuntu.social
2026-02-16

Problems with importing Firewall CA Certificate #2204 #vpn #ssl #certificates #github

askubuntu.com/q/1564035/612

dorotaCdcz@fosstodon.org
2026-02-14

Do you hate #passwords as much as I do?
Can't we have public key #authentication everywhere? Like in my #email client?

Yes we can! Without #authkeys!

Because #TLS supports not just #server side #certificates , but also the client can be verified.

My #Dovecot now logs me in without a password :D I just need to possess a valid (unlocked) private key. The secret never crosses the network.

Next step: make sure the decrypted key is never written to #swap .

#networking #security

Andrew Armstrongtechygeekshome@techhub.social
2026-02-14

How to Easily Secure A Website | techygeekshome.info/how-to-eas #security #SSL 
techygeekshome.info/how-to-eas

Anthony Powellajguides
2026-02-14

How to Easily Secure A Website | techygeekshome.info/how-to-eas  
techygeekshome.info/how-to-eas

moozermoozer
2026-02-11

I use DNS01 got get for my internal servers. This works nicely and I don't have to worry about installing my own certificate in every device, workstation and server.
It has the drawback of everyone on the internet knows which servers I have on my domain.
Can I use ACME to get an intermediate certificate, that I can use for e.g. subdomain locally?

Dan Stafforddanstafford
2026-02-11

#2026

Microsoft warns Secure Boot certificates will expire in 2026 | Windows Central share.google/63ykWQCfLIUIduB0G

Trevor McLeodtabmcleo
2026-02-10

Still using ?

Yet another reason to ensure your device is enrolled in the (Extended Security Updates) program.

theverge.com/tech/876336/micro

Absolute Memery 🎭AbsoluteMemery@tribe.net
2026-02-10

#Certification #Certifications #Certificate #Certificates #Certified #Bureaucracy #Paperwork.

#Meme #Memes #Humour #Humor

Pusher of Pixelspixelpusher220@dmv.community
2026-02-10

#Linux #Win10 #SecureBoot #UEFI #Certificates

TL/DR
Does Linux have a fix/mitigation of this expiring cert issue?

Full post:

So an important/critical firmware level certificate from Microsoft is expiring in June - which will leave Win10 users even more vulnerable to malware.

And this article utterly fails to even *mention* linux.

Some googling indicates Linux in general depends on the Microsoft certificates for Secureboot/UEFI compatibility.

As a software dev of 30 years I'm technical enough to be comfortable in the innards and configs of stuff, but not terribly well versed in Linux under the hood.

pcmag.com/news/upgrade-now-mic

Daniel Keerthedxt@infosec.exchange
2026-02-08

Here's how you regenerate the ESX self-signed certificate and extra info about rhttpproxy the Envoy reverse proxy ESX uses.

thedxt.ca/2026/02/esx-regenera

#ESX #VMware #certificates #vExpert #Broadcom

The Eclectic Light Companyeclecticlight.co@web.brid.gy
2026-02-02

Apple has just released security updates for Catalina and Big Sur

fed.brid.gy/r/https://eclectic

<p>Apple has just released security updates for macOS Catalina and Big Sur. Yes, you saw that right, macOS 10.15 Catalina and 11 Big Sur.</p> <p>These are formally macOS Big Sur 11.7.11 and Catalina Security Update 2026-001. Although billed as security updates, these extend the security certificates required by iMessage, FaceTime and Mac activation so they will continue working after January 2027. If you&#8217;re still running macOS 10.15 or 11, they&#8217;re essential. However, there are no published security fixes for either.</p>
Mike Harrisonmeuon@fosstodon.org
2026-02-02

DANE is interesting
Checking out mails servers and saw a test for DANE. Time to learn something new? DANE = DNS-based Authentication of Named Entities. Poorly supported in end clients, but I'm liking the ideas presented for verifying what CA is supposed to be the issuing CA. A cross check. May also be useful for self-signed certs. Gonna have to play. en.wikipedia.org/wiki/DNS-base #certificates #dane #ssl #tls

PrivacyDigestPrivacyDigest@mas.to
2026-01-28

#Apple Patches Old Versions of #iOS to Keep #iMessage and #FaceTime Running

Apple is renewing #certificates for iOS versions dating back to 2013 to keep the lights on a little longer.
#security

wired.com/story/apple-patches-

Osna.FMosnafm
2026-01-26

According to a survey conducted by the opinion‑polling institute Forsa, German citizens overwhelmingly want to keep the telephone sickness‑certification system... news.osna.fm/?p=31957 |

Neil Batchelornbwpuk@infosec.exchange
2026-01-23

6-day and IP Address Certificates are Generally Available

letsencrypt.org/2026/01/15/6da

#letsencrypt #security #tls #certificates

The Eclectic Light Companyeclecticlight.co@web.brid.gy
2026-01-22

Can you still run old App Store apps?

fed.brid.gy/r/https://eclectic

<p>In <a href="https://eclecticlight.co/2026/01/20/is-that-signing-certificate-still-valid/">my review of apps</a> and the validity of certificates used to sign them, I dodged the thorny issue of those apps delivered from the App Store, writing that &#8220;their signatures will remain valid as long as the developer remains a member of its Developer Program.&#8221; If you care to take a look at some of those apps using <a href="https://www.mothersruin.com/software/Apparency/" rel="noopener" target="_blank">Apparency</a>, you&#8217;ll discover that many of them have certificates that expired on 7 February 2023 at 00:00:00 GMT. This article explains why, how they should still run, but may not in the future.</p> <p>As I explained, the general rule for certificates is that, once they have expired by date, they&#8217;re no longer valid. However, to ensure that third-party apps and installers can still be used after their expiry, Apple usually includes a trusted timestamp in their signature. Provided the certificate was valid at the time the app or installer was signed, then macOS should accept it as still being valid, as long as it hasn&#8217;t been revoked. But App Store apps are different again.</p> <p>For reasons unknown, Apple doesn&#8217;t sign App Store apps with trusted timestamps. As a result, when its certificate expires, that app&#8217;s signature should no longer be valid, and macOS should refuse to run it on that basis. What happens in practice is that it turns a blind
The Eclectic Light Companyeclecticlight.co@web.brid.gy
2026-01-20

Is that signing certificate still valid?

fed.brid.gy/r/https://eclectic

<p>The general rule with security certificates is that they&#8217;re only valid until their expiry date. When the certificate for a website expires, your browser should warn you if you try to connect to that site, and it will normally refuse to make the connection as a result. Thankfully, Apple&#8217;s signing certificates generally work differently.</p> <p>When Apple adopted code signing using certificates that it issues, it recognised that applying that policy would result in apps having expiry dates enforced by their certificates, so applies a different rule. When a developer signs an app using their Developer ID Application certificate, a trusted timestamp is included to verify when that signing took place. Provided the certificate was valid at that time, and hasn&#8217;t been revoked since, the certificate is deemed valid by macOS.</p> <p>The same principle applies to Developer ID Installer certificates used to sign install packages, only for several years they weren&#8217;t given trusted timestamps. As a result of that, those old installer certificates were only valid as long as the certificate.</p> <p>Apple changed that several years ago, since when installer packages have normally been given trusted timestamps, so they now work the same as Developer ID Application certificates, and can still be run successfully after their certificate has expired, provided that it was valid at the time in their trusted timestamp, and hasn&#8217;t been revoked since. However, this has

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst