TLS - PRO-IT Rocks!

TLS

The 47-Day Certificate: How Apple Killed the Annual SSL Renewal

The CA/Browser Forum just approved shrinking TLS certificates to 47 days by 2029. We'll soon pay the same price for commercial certs that expire faster than a DHCP lease. Time to embrace automation - those 'annoying' 90-day Let's Encrypt certificates suddenly look like visionaries.

vpn

TLS Error: TLS handshake failed, TLS Error: local/remote TLS keys are out of sync

My rocksolid OpenVPN server dropped every connection at once. Quick inspection of logs on server shown: 2022-01-17 11:07:28 us=339922 MULTI: multi_create_instance called 2022-01-17 11:07:28 us=340120 x.x.x.x:65086 Re-using SSL/TLS context 2022-01-17 11:07:28 us=340967 x.x.