| 01:01.29 | *** join/#uphpu bbankes (~bbankes@69.58.94.166) |
| 01:01.30 | *** join/#uphpu bbankes_ (~bbankes@69.58.94.166) |
| 02:29.54 | *** join/#uphpu SunSparc (~jonathan@c-98-202-246-221.hsd1.ut.comcast.net) |
| 02:29.54 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 08:57.28 | *** join/#uphpu shalkie (~shalkie@theadamsresidence.net) |
| 14:09.05 | *** join/#uphpu bbankes_ (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 14:09.06 | *** join/#uphpu bbankes (~bbankes@50-200-100-242-static.hfc.comcastbusiness.net) |
| 14:43.51 | *** join/#uphpu josephscott (~josephsco@192.0.80.201) |
| 15:10.16 | *** join/#uphpu SunSparc (~jonathan@45.56.57.85) |
| 15:10.16 | *** mode/#UPHPU [+v SunSparc] by ChanServ |
| 15:31.04 | *** join/#uphpu jtsnow (~jtsnow@199.16.150.186) |
| 15:31.05 | *** mode/#UPHPU [+v jtsnow] by ChanServ |
| 16:19.09 | *** join/#uphpu mgeary (~mgeary@75-144-8-210-utah.hfc.comcastbusiness.net) |
| 16:19.10 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 17:12.01 | *** join/#uphpu mgeary (~mgeary@75-144-8-210-utah.hfc.comcastbusiness.net) |
| 17:12.01 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 18:12.29 | *** join/#uphpu UtahDave (~boucha@208.186.233.100) |
| 18:12.29 | *** mode/#UPHPU [+o UtahDave] by ChanServ |
| 19:54.42 | utahcon | anyone around? |
| 19:57.43 | *** mode/#UPHPU [+v utahcon] by ChanServ |
| 20:00.38 | DexterTheDragon | just the tumbleweeds |
| 20:03.17 | utahcon | dude... you would know this one :D |
| 20:03.30 | utahcon | maybe |
| 20:03.32 | utahcon | I will try |
| 20:04.04 | utahcon | my company is setting up a cloud presence and wanting to do all things securely... enter openssl x509 certs -- going to make a self signed root ca, intermediate and then certs per user/server |
| 20:04.11 | utahcon | let's call this super.io |
| 20:04.49 | utahcon | now... my dev comes to me and says... they need to expose securely with a publicly/commercial cert to customer X... |
| 20:05.22 | utahcon | they just present in their app that commercial cert, and the conflicts of them both being super.io matter not -- right? |
| 20:05.39 | utahcon | also... Hi DexterTheDragon, long time no chat -- sorry to bust in like this |
| 20:07.15 | DexterTheDragon | sadly my knowledge of certs is about as far as "letsencrypt seems cool" |
| 20:08.04 | utahcon | noted |
| 20:08.07 | utahcon | I think it will be fine |
| 20:08.12 | utahcon | I will report if it is not :D |
| 20:08.18 | utahcon | how are things ? |
| 20:08.51 | DexterTheDragon | good. how's the PNW treating ya? |
| 20:09.00 | utahcon | has been warm and dry |
| 20:09.05 | utahcon | but that is changing this weekend |
| 20:59.27 | *** part/#uphpu UtahDave (~boucha@208.186.233.100) |
| 21:44.55 | herlo | utahcon: changing here, too |
| 21:46.18 | herlo | utahcon: the main concern there is where you terminate ssl. If it's at the VIP/varnish/haproxy area, you should put your certs there. If you pass it further down to your front end servers and require ssl to your actual web front end behind your fw, you might have more challenges. |
| 21:47.19 | utahcon | herlo -- but the theory is if service A uses selfsign.ca.crt and service B uses commercial.ca.crt -- all should be ok |
| 21:47.28 | utahcon | as far as I understand |
| 21:55.33 | herlo | indeed. |
| 21:55.38 | herlo | just terminate at the VIP |
| 21:55.47 | herlo | if you don't, then you have to do magic |
| 21:55.55 | herlo | well, magic to me, anyway. :) |
| 21:55.58 | herlo | utahcon: ^^ |
| 22:00.22 | utahcon | thanks |
| 22:17.47 | herlo | :) |