Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: dyn.dns.he.net certificate  (Read 999 times)

realdreams

  • Newbie
  • *
  • Posts: 25
    • View Profile
dyn.dns.he.net certificate
« on: October 05, 2016, 05:00:36 PM »

Would you guys switch from CACert to Let's Encrypt so no more need for `--no-check-certificate`?
Logged

11rcombs

  • Newbie
  • *
  • Posts: 3
    • View Profile
Re: dyn.dns.he.net certificate
« Reply #1 on: April 15, 2017, 07:26:35 AM »

+1 on this. Additionally, ipv4.dyn.dns.he.net currently uses a cert for dyn.dns.he.net, which is clearly incorrect.
Logged

stolen

  • Newbie
  • *
  • Posts: 6
    • View Profile
Re: dyn.dns.he.net certificate
« Reply #2 on: June 22, 2017, 09:55:50 AM »

+1. Anything so that we're not bypassing security checks.
Logged

divad27182

  • Newbie
  • *
  • Posts: 35
    • View Profile
Re: dyn.dns.he.net certificate
« Reply #3 on: June 23, 2017, 08:44:17 PM »

-1 on this.  If you want to check the certificate, install CACert's root certificate.

(Personally, I don't understand how "Let's Encrypt" got into the lists... but then that could apply to most of the listed CAs.)

By the way... it looks like Let's Encrypt does not use a Let's Encrypt certificate.  Should anyone?
Logged