They announced Let’s Encrypt certs issued after 1pm Pacific today are compatible with Windows XP. The longer explanation is here. But even after reading it, I have why. On its replies, there are a lot of pros and cons.
Month: March 2016
At 2016 FORD WORLD WOMEN’S CURLING CHAMPIONSHIP Japan curling team nails down Page 1-2 playoff berth. This is the first time for the country. Wow!
The declaration of flowering(開花宣言). For what? For cherry blossoms in my garden this year he-he. I’ll show you the photo. See the right image, which has only one blossom open. Today was very sunny and it will be sunny tomorrow. So, the peak bloom date is soon.
On another right image you see plants like writing brushes, which are tsukushi(土筆). Tsukushi is one of spring greens and eatable. They say scrambled eggs with tsukushi are good though I don’t like them so much.
Update information Edit(Apr.11) Edit2(Jun.23) Edit3(Oct.13)
[2017.OCt.20] We can use mod_md in ApacheLounge 2.4.x version now, so I changed from dehydrated (former Letsencrypt.sh) to mod_md about certs updating tool. About this, see → “From dehydrate to mod_md, Let’s Encrypt Tool”.
========================================================
【2016.7.19 update】
At this time, the script letsencrypt-win-simple doesn’t support the renewal of certificates on Apache Windows version, and the official client, that’s certbot, also doesn’t support Apache on Windows OS. So, I think I use the other script named letsencrypt.sh.☞‘Letsencrypt.sh on Windows-#1’
========================================================
The day before yesterday I wrote this. At the point I got a certificate only for o6asan.com from Let’s Encrypt.
The things among my server environment relate to the work is given below.
- Windows7 HE SP1 (x86)
- Apache2.4.x with VC14
Update information Edit(Mar.14)
I installed a Certificate of Let’s Encrypt because of くりくりさん’s comments and it was successful. But I’ve not understood very well, yet. How can I renew the certificate? What procedures do I need to have SAN support certificate? I found ‘HOW TO’ for Exchange 2016, but mine is Apache.
I should study more about Let’s Encrypt.
Edit(Mar.14):
I posted the article “How to install a Let’s Encrypt Certificate supports SAN to Apache on Windows”.
Categories
Vulnerability DROWN.
After reading ‘DROWN SSLv2 Vulnerability Rears Ugly Head, Puts One-Third of HTTPS Servers At Risk’, I checked my server by The DROWN Attack and DROWN Scanner. Vulnerability DROWN is related to OpenSSL Security Advisory [1st March 2016].
Update information Edit(Jun.18)
Actually, Cygwin has libev and nghttp2 packages now. So, you can use h2load and nghttp features even if you don’t build nghttp2 by yourself. Nevertheless, if youl build nghttp2 on Cygwin, you need to build the Jansson and the spdylay before building it because Cygwin doesn’t have their packages. But, according to the current trend, I think you don’t need the spdylay package. (2016.6.18)
—————————————————————————————————————————————————
Yes, the title is just a word play from one of Tim Burton works (´ϖ`).
On February 29, my server was down from about 0:00 to about 20:30 because of hardware malfunction. Last Sunday, February 28, I was trying hard for H2PushPriority which is one of new directives of Module mod_http2. To enable this feature is very easy, but to tune it up is difficult for me.