IRC log for #dataverse, 2018-08-15

Connect via chat.dataverse.org to discuss Dataverse (dataverse.org, an open source web application for sharing, citing, analyzing, and preserving research data) with users and developers.

All times shown according to UTC.

Time	Nick	Message
09:16		JonathanNeal_ joined #dataverse
12:32		donsizemore joined #dataverse
12:50		andrewSC joined #dataverse
14:11		djbrooke joined #dataverse
14:29		pameyer joined #dataverse
14:34		djbrooke joined #dataverse
15:13		djbrooke joined #dataverse
15:26		djbrooke joined #dataverse
15:29		pameyer joined #dataverse
15:33		pameyer joined #dataverse
15:36		djbrooke joined #dataverse
16:10		djbrooke joined #dataverse
17:00		djbrooke joined #dataverse
17:09		djbrooke joined #dataverse
17:11		pameyer joined #dataverse
17:26		pameyer joined #dataverse
17:37		pameyer joined #dataverse
17:50		djbrooke joined #dataverse
17:59		djbrooke joined #dataverse
18:01		pameyer joined #dataverse
18:01		djbrooke_ joined #dataverse
18:19		donsizemore joined #dataverse
18:20	donsizemore	@pdurbin @pameyer I was at lunch and on my phone, so I wrote back to Sherry privately. I explained to her what UNC does for certs (InCommon for *.unc.edu hosts) and asked if UVA offered something similar for campus, and asked if they had looked at CertBot. Seems like her systems people should be handling this unless $$$ comes into play.
19:01		pameyer joined #dataverse
19:15		pameyer joined #dataverse
19:36		pameyer joined #dataverse
19:49		dataverse-user joined #dataverse
19:54	pameyer	@donsizemore - so she got 3 people telling her the same thing :)
19:54	pameyer	our group has some systems with letsencrypt ; but not one's I'm the primary admin for
19:56	pdurbin	I almost suggested she could pop into IRC and talk to use about certs. I'm glad you both reached out. Thanks!
20:01	pameyer	@pdurbin @donsizemore her latest mentioned a root cert inside glassfish. I haven't used the admin console; but if that's https I could see it potentially having an internal cert that's expiring (with glassfish age)
20:01	pameyer	I don't think I've got any systems with 4848 exposed to check on
20:04	pdurbin	Huh. Interesting theory. Could be.
20:06		pameyer joined #dataverse
20:07	pameyer	I'm pretty sure you could use a cert for application traffic too; but I think you'd have to go out of your way to
20:08	pdurbin	it's really hard
20:08	pdurbin	that's why I put the cert in apache rather than glassfish
20:09	pameyer	yeah - the docs didn't make it look like something I'd want to do
20:09	pdurbin	it is the way of pain
20:11		donsizemore joined #dataverse
20:11	donsizemore	@pameyer @pdurbin i'm dying to respond "oh, i always just click on 'continue anyway'"
20:11	pameyer	:)
20:12	pameyer	doesn't everybody?
20:13	pdurbin	:)
20:13	donsizemore	i know a guy who keeps his PGP private key on a sequestered laptop, and only publishes via USB drive / SneakerNet. i imagine an expired cert would make his head spin
20:23		pameyer joined #dataverse
20:25	pameyer	@donsizemore if you look at how many CAs are trusted by browsers, and who some of those CAs are; expired certs wouldn't make things that much worse
20:26	pdurbin	yeah, earlier I was looking at https://security.stackexchange.com/questions/109095/why-is-firefox-shipped-with-expired-root-certificates
20:26	pdurbin	¯\_(ツ)_/¯

Connect via chat.dataverse.org to discuss Dataverse (dataverse.org, an open source web application for sharing, citing, analyzing, and preserving research data) with users and developers.