from Hacker News

Expired SSL Certificate at GitHub

by cloudc0de on 3/24/23, 8:44 PM with 30 comments

  • by nayuki on 3/24/23, 9:01 PM

  • by mattbillenstein on 3/24/23, 10:07 PM

    I built a free monitoring service some years ago if anyone doesn't want to be the victim of this...

    https://ismycertexpired.com/check?domain=objects.githubuserc...

  • by cloudc0de on 3/24/23, 8:44 PM

    Guess this will never stop happening

  • by dz0ny on 3/24/23, 9:01 PM

    Looks like they tried to rotate the cert, maybe due to the private key leak. But instead, they rolled the wrong expired key to all content domains.

  • by ollemasle on 3/24/23, 9:06 PM

    They just posted this update on GitHub Status - related to GitHub Pages:

      We are aware of TLS problems related to an expired certificate in our CDN configuration.
  We are working to resolve this issue.
    See https://www.githubstatus.com/incidents/x7njwb481j9b

  • by sweetroll on 3/24/23, 8:56 PM

    Glad I'm not the only one.

    Getting the same when trying to wget a release - says failed to verify certificate for objects.githubusercontent.com

  • by paxys on 3/24/23, 10:16 PM

    How is it that literally nobody – whether deploying a hobby project or working at Microsoft or Google – has ever been able to figure out cert rotation? There's a billion dollar company waiting to be built if someone can just ensure that all my TLS certs across all servers will stay up to date for all eternity.

  • by ksml on 3/24/23, 8:52 PM

    They're serving the wrong cert on pkg-containers.githubusercontent.com (it's for *.githubassets.com) and their support site also expired 3/21... https://support.github.com/ What is going on over there?

  • by captn3m0 on 3/25/23, 2:26 AM

    I reported a expired certificate to DigitalOcean last week, it was for their package repository which meant apt-get would give warnings. These things happen. Was fixed in a hour.

  • by laund on 3/24/23, 8:59 PM

    same for raw.githubusercontent.com which is images, raw text files etc. certificte validity end date: Tue, 21 Mar 2023 23:59:59 GMT

  • by crazysim on 3/24/23, 9:19 PM

    They're not having a great Friday.

  • by GOATS- on 3/24/23, 8:47 PM

    Heh, just noticed this myself.

  • by laund on 3/24/23, 9:06 PM

    FIXED!

  • by flerchin on 3/24/23, 9:12 PM

    It's better now.

  • by markuman123 on 3/24/23, 8:59 PM

    maybe the certificate crew is laid off?

  • by markuman123 on 3/24/23, 8:58 PM

    expired two days ago (3/22/2023) and no one cares