*** nowen (~nowen@99.174.93.102) has joined #wikid | 13:35 | |
*** mostly_happy_use (4a60b442@gateway/web/freenode/ip.74.96.180.66) has joined #wikid | 20:34 | |
*** mostly_happy_use has quit (Ping timeout: 245 seconds) | 20:50 | |
*** mostly_happy (4a60b442@gateway/web/freenode/ip.74.96.180.66) has joined #wikid | 21:39 | |
mostly_happy | How much work is it to update the clients' downloaded SSL hash when the SSL certificate of a registered URL changes? | 21:39 |
---|---|---|
nowen | mostly_happy: good question. It should get updated when the token restarts. | 21:40 |
mostly_happy | Had trouble with that today. By token restarting, you mean asking for a new token? Or is there an action to take on the server? | 21:43 |
nowen | you added the new https url on the domain? | 21:43 |
nowen | I mean restarting the software token client | 21:43 |
mostly_happy | Hmm. The URL is the same. But I did try removing the URL and adding it again. | 21:45 |
nowen | what problem are you having? | 21:45 |
mostly_happy | The token client says that the URL changed. | 21:46 |
nowen | it is possible that the user is being attacked. | 21:46 |
mostly_happy | I got one client fixed by deleting the user and starting from scratch. | 21:46 |
nowen | any of your users in romania? | 21:47 |
mostly_happy | No, fortunately! | 21:47 |
nowen | well, that kind of dns attack that occurred there today is what this would prevent | 21:47 |
mostly_happy | Glad for the protection. Will continue to delete/re-deploy users. We don't have many. | 21:50 |
nowen | what company are you with? | 21:51 |
mostly_happy | North American Division of Seventh-day Adventists | 21:51 |
nowen | are you all paid up on your subscription? | 21:51 |
nowen | nevermind, looks like it | 21:52 |
nowen | I | 21:52 |
nowen | am wondering if there was one problem, perhaps a real attack, then the changing of the url messed it up for everyone? | 21:53 |
nowen | if so, I would view that as a bug on our end | 21:53 |
mostly_happy | Seems like only one client had trouble in the end. I'll keep in mind next time we update our SSL cert that it's possible for someone to have trouble. But sounds like I shouldn't have to do anything on the server, right? | 21:56 |
nowen | no, you shouldn't | 21:57 |
mostly_happy | Thanks! | 21:57 |
nowen | let me know if you see any more odd behavior here. | 21:57 |
*** mostly_happy has quit (Ping timeout: 245 seconds) | 22:12 | |
*** sandylootcrew (d131b518@gateway/web/freenode/ip.209.49.181.24) has joined #wikid | 22:37 | |
*** sandylootcrew has parted #wikid (None) | 22:39 | |
*** nowen has quit (Quit: Leaving.) | 22:42 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!