« first day (3903 days earlier)      last day (1101 days later) » 

1:18 AM
7 messages moved to Chimney
 
 
5 hours later…
6:14 AM
gmail is down....
I wonder what it takes to bring such enormous service down.
 
Has there been an update to what authors of closed questions see since this:
38
Q: New Post Notices are live network-wide

Yaakov EllisFor further issues, bugs and feedback that have not been covered by existing answers here please feel free to ask a new question. A few minutes ago, new Post Notices were launched across the Stack Exchange network. This includes all public sites, all meta sites, and all Basic and Business tier T...

Because it doesn't seem to be accurate.
Specifically, it says that post authors can see the users who closed the question, but I see that that is not the case on my closed questions.
 
@Alex It used to be the case at the time the new notices had just rolled out. That post was historically locked before the system was changed to not show them, so it couldn't be updated.
 
@Alex yeah it changed a bit, it's hidden in the question page itself, but visible in revisions page and timeline.
 
Is the new update mentioned somewhere?
I.e. is there a post that describes the current way that it works?
 
31
A: How could we improve our planned post notice improvements?

fbueckertstatus-completed Update: We've changed the post notices for question askers so that they do not see the usernames of close voters listed - this includes askers with the close/reopen vote privilege. We considered making it so that post owners with sufficient rep could still see the list, but deci...

Announced via an edit.
 
6:31 AM
@ShadowTheVaccinatedWizard Thank you.
 
It also answers my follow up question of why being a post author overrides being someone with voting privileges.
 
@Alex oh, nice. :)
 
Would have been even nicer if I liked the answer.
 
lol well can't have it all. ;)
 
6:37 AM
This is true.
 
Reminds me of my 4 y/o daughter, who used to eat a cake (that she liked) then ask for more. When told she can't have another one she said something like "but I don't want to eat the cake I had before".
Classic "can't eat the cake and leave it whole".
 
She sounds like a smart one.
 
@Alex rascal, more accurate. ;)
Usually she's getting what she wants, this way or another.
 
Even better.
 
e.g. with that cake? She started crying for hour or so, eventually got it.
She's also the only one of the kids (we have two more, older than her) who got to sleep in our (parents) bed.
 
6:44 AM
 
The other two simply never thought it's an option.
@Alex yeah, asked few questions there already. :D
 
@Alex Is there a parallel site for children to ask how to deal with parents?
 
@Alex actually..... such cases exist in there already.
Parenting or IPS.
 
Interesting. Perhaps I shall check it out.
 
@Alex yeah, there are fine people there. I reduced activity after mini clash with mods about a question being off topic, but looking back it was silly.
 
6:46 AM
Though I suppose the majority of the population that would ask such questions can't have an account.
 
If I'll have a good question to ask, will still ask there.
@Alex true, but teenagers can and did it, might search for example when having some time.
 
 
2 hours later…
8:43 AM
@JourneymanGeek @rene I need some help.... I renewed SSL couple of months ago, on server with both node.js (listening on port 443) and IIS (port 8080). The one in node.js works fine and SSL is active and valid, but the IIS doesn't recognize it and showing it's expired. Any tips?
Thanks!
 
something smells off
 
(any others are welcome, just pinging couple of heavy guns ;))
 
Both on the same system/windows?
 
@JourneymanGeek same machine, yes. Windows Server 2012 I think, can check if you want.
 
@ShadowTheVaccinatedWizard are they picking up the certs from the same place?
 
8:45 AM
@JourneymanGeek nope. Don't think so. For the node.js I made .pem files manually and IIS... oh wait.
 
;)
Quack
 
Last time I imported it via the IIS at some point so it recognized it.
 
could you try importing it again?
 
Now when I got the new cert, I used different method to create the .pem files.
@JourneymanGeek should I import from scratch, or choose "renew"?
 
@ShadowTheVaccinatedWizard Not that familiar with how you do it with IIS
I mostly do linux so...
I'd try renewing first
 
8:57 AM
Trying
hmm.... I didn't do anything, but turns out I did when installing for node.js after all and forgot. (it was two months ago and in a crazy rush as they forgot to ask to renew in time)
 
So fixed? ;D
 
What I see as off is the old having www. in front, and new doesn't have. @Journeyman can it be the reason why it's not working?
@JourneymanGeek no... :(
 
@ShadowTheVaccinatedWizard yes
unless its a wildcard cert
 
hm
So, this is what's happening
 
9:05 AM
@JourneymanGeek it might be. What does it mean exactly?
You want the CSR?
 
your system sees "schoolsport.co.il" and uses the cert that refers to that
No wait
that's wierd
 
I know it's weird, hence coming to experts. ;)
 
So its still picking up the old cert
 
@JourneymanGeek exactly
So maybe I have to remove it?
 
is there something like vhosts for IIS?
 
9:07 AM
@JourneymanGeek no idea.. lol. What's that?
I'm neither IIS nor SSL expert, most I do is stuff like that, and it's always getting complex somehow.
 
skip the first part about generating the cert
 
@JourneymanGeek hmm... OK. Thanks!
 
I THINK you would have a different error if you got it working - since the cert is for the foo.bar, not www.foo.bar
but essentially you're still using the old cert
 
I think it's okay, since the Subject Alternative Name also includes both
 
@JourneymanGeek what to put in the "Host name"? There isn't really any sub domain.
oh no
I'm so dumb.
going away in shame never to return
crying in some dark corner of the universe
Selected the correct cert, all working now.
Thanks @Journeyman you helped a lot. :-)
I did almost everything right, but was in a rush so never double checked the basics.
@MetaAndrewT. yup
 
9:18 AM
@ShadowTheVaccinatedWizard wow, that was fast. My experience with replacing cert is that it will take some times to propagate, but probably because we're delegating it to the hosting provider
 
@MetaAndrewT. well it's all in place already, e.g. the cert is active, just on different port on the server.
 
9:53 AM
@MetaAndrewT. he did everything but... point the server at the right cert
@ShadowTheVaccinatedWizard I hope you took notes :D
 
Rob
10:05 AM
@ShadowTheVaccinatedWizard It can be blank if you only have one site, if you're sharing an IP address then each server gets named: ssl.com/how-to/binding-in-iis-10 woshub.com/… serverfault.com/questions/359760/…
 
10:46 AM
@JourneymanGeek hehe, of course! :P
@Rob yeah, thanks. Actually two sites on the server, but not under IIS. The part on the IIS is only for some legacy software that's still in use, and using old Web Services.
 
that's why I asked about vhosts
 
11:15 AM
The fundamentals are the seame, the set up methods very different ;)
@ShadowTheVaccinatedWizard I suggest you stick to one cert name in future (and document it)
 
 
2 hours later…
12:55 PM
@JourneymanGeek OK, thanks!
 
1:36 PM
(also I'm really sure you have good reasons for using geotrust but - lets encrypt tends to have really nice automatic renewals (since they have shorter cert validity) on most platforms. That + ssl-config.mozilla.org (no IIS there though) is my goto for most of my SSL needs
 
1:46 PM
@JourneymanGeek not my decision, client's host decision. I just install what they send.
 
Which is fine :D
 
@JourneymanGeek that ssl-config is h'ing awesome, why haven't I heard of that until now :O
 
@MetaAndrewT. :d
Cause no one asked me about ssl :D
 
@MetaAndrewT. you didn't ask!
:P
 
well, we did have an SSL problem with Spring and Tomcat...
 
1:50 PM
(I learnt about it from another SE user cause I was trying to set up SSL and wasn't sure what to do)
 
and almost no one on the developer-side understood about SSL and TLS...
 
@MetaAndrewT. how long ago did it happen??
 
last year, double complicated with various Android not supporting newer TLS Cipher Suites.
 
Oh
I think they still don't
I had some trouble with TLS 1.3 and anything that had a android app client that I was self hosting
dropped it down to TLS 1.2 or better
 
yeah, I had to refer to Qualys SSL Labs to find the compromise: ssllabs.com/ssltest/clients.html
 
1:59 PM
Oh that's useful for troubleshooting
I think I was even more confused cause the same services worked on other non android systems or over web front ends that... used the same ports
 
heh
SSL can be real pain.
feeling bit better
 
Well yeah. I have a fun problem soon
 
@JourneymanGeek ?
 
I have all my services in lxc containers - one's the web proxy and handles certs
I need to work out how to share it with another container for email :D
 
You have 1 problem: not using SSL. After adding SSL, you now have 2 problems?
 
2:05 PM
oh setting up mail is generally a pain
and this is the least painful way to set things up for me
 
2:54 PM
@ShadowTheVaccinatedWizard dictionary.com
 
Rob
3:05 PM
Putting the siSSLe in your eyes (IIs) since '95.
 
3:57 PM
Is there a network policy on removing tag wikis from tags with 0 questions?
I tried looking under the tag but couldn't find anything
 
4:10 PM
@cairdcoinheringaahing I think the tags themselves poof?
 
@JourneymanGeek So it's best to just leave it be and it'll take care of itself?
 
4:24 PM
yep
 
4:41 PM
@cairdcoinheringaahing more or less. We just clean up the posts
 
Rob
4:52 PM
10 years a :
 
 
2 hours later…
6:40 PM
makes @sha a faq
Frequently Astute Querent
 
 
2 hours later…
Rob
8:25 PM
⭎ He does toot frequently.
 

« first day (3903 days earlier)      last day (1101 days later) »