Igor Bukanov
Igor Bukanov
Currently the cert command uses the first domain name to name the generated host key and certificates. When generating several certificates at once this naming is inconvenient and I have...
When the real web server serves as a proxy for the tool, redirecting the traffic for /.well-known/acme-challenge using unix sockets allows for more resilient/hardened setup. For example, one can use...
Currently if one of ln -sf at the end of sign_domain fails, it will leave the file in inconsistent state when some of certificate links points to newer files while...
It seems dehydrated does not with [pebble](https://github.com/letsencrypt/pebble), a test acme server that is useful for local testing of certificate renewals. To reproduce, install pebble as instructed in the above link....
Flow version: 0.171.0 ## Expected behavior In type A = {...ObjectType, +b} ...ObjectType should preserve read-only status of fields in ObjectType and should not affect read-only status of b. ##...
## Proposal `$ReadOnly` utility type creates a read-only view of T. As such it does not model properly the effect of `Object.freeze()` as a reference to T can be assigned...
For better integration with systemd it would be nice to use sd_notify calls when available. This way systemd unit file can use type=notify allowing systemd to track properly service lifetime.
### Summary The present PR is not for merge but for reviewing the proposed dev testing environment. ### Type of Change - [ ] Product feature - [ ] Bug...
wip
Prototype of the new standalone payments-service repo using a branch in bat-go. On the branch the repo is declared as payments-service module and uses the libs folder from the particular...
Use tls.Config.VerifyPeerCertificate, not the dialer, to verify the Uphold TLS certificate fingerprint. This ensures that the fingerprint checks are done even if a proxy is used. ### Summary ### Type...