One more: The Calender @ http://www.boost.org/development/index.html doesn't work in Chrome. On Tue, Apr 7, 2015 at 6:24 PM, Olaf van der Spek wrote:

On Tue, Apr 7, 2015 at 5:08 PM, Beman Dawes wrote:

...

On Tue, Apr 7, 2015 at 10:12 AM, Olaf van der Spek wrote:

...

Hi,

The certificatie of svn.boost.org has expired (two weeks ago)..

We are working on getting a new certificate, and setting up a procedure to avoid the expired certificate problem in the future. It is taking a bit of time, however.

Boost is at arstechnica. :p

http://arstechnica.com/security/2015/04/firefox-disables-opportunistic-encry...

-- Olaf

-- Olaf

On Tue, Apr 7, 2015 at 9:49 AM, Olaf van der Spek wrote:

One more: The Calender @ http://www.boost.org/development/index.html doesn't work in Chrome.

Works here in Chrome for Mac OS X. -- Marshall

On 04/07/2015 02:07 PM, Marshall Clow wrote:

On Tue, Apr 7, 2015 at 9:24 AM, Olaf van der Spek wrote:

...

Boost is at arstechnica. :p

http://arstechnica.com/security/2015/04/firefox-disables-opportunistic-encry...

Can anyone tell me *why* boost is part of that article? it's not mentioned in the text, and the article is about something else entirely.

-- Marshall

_______________________________________________ Unsubscribe & other changes: http://lists.boost.org/mailman/listinfo.cgi/boost

The image shown at the top of the article illustrates the certificate error given by Firefox when visiting svn.boost.org. Jason

On 04/07/2015 03:33 PM, Niall Douglas wrote:

On 7 Apr 2015 at 11:08, Beman Dawes wrote:

...

...

The certificatie of svn.boost.org has expired (two weeks ago)..

We are working on getting a new certificate, and setting up a procedure to avoid the expired certificate problem in the future. It is taking a bit of time, however.

In case people aren't aware, to renew the kind of cert which expired you need to prove your identity which includes a proof of address which usually means a snail mail card in the post with a verification code plus lots of mailing identity documents to people. This is why

I have no idea what you are talking about. There are a lot of reasons that certs can take some time to renew, snail mail isn't one of them. We renew about 2-3 certs a month ranging from standard vanilla to wild-card and crazy merchant certs. In January we dealt with 2 certs that had expired. Snail mail has never been a requirement. Can you please expound? michael -- Michael Caisse ciere consulting ciere.com

On Wed, Apr 8, 2015 at 1:07 AM, Niall Douglas wrote:

On 7 Apr 2015 at 15:40, Michael Caisse wrote:

...

...

...

We are working on getting a new certificate, and setting up a procedure to avoid the expired certificate problem in the future. It is taking a bit of time, however.

In case people aren't aware, to renew the kind of cert which expired you need to prove your identity which includes a proof of address which usually means a snail mail card in the post with a verification code plus lots of mailing identity documents to people. This is why

I have no idea what you are talking about. There are a lot of reasons that certs can take some time to renew, snail mail isn't one of them.

We renew about 2-3 certs a month ranging from standard vanilla to wild-card and crazy merchant certs. In January we dealt with 2 certs that had expired. Snail mail has never been a requirement.

Can you please expound?

Sure.

In the case of the SSL cert for *.nedprod.com, the issuer needed to prove my address and sent a code on a card to my physical address. That took two weeks, seeing as the card comes from Israel (it actually takes eight weeks in total to renew SSL certs for me, but that is for other reasons).

I entirely accept that if your issuer lived in the same city in the US as you do, address verification would be rather quicker. They could also accept other evidence only possible to a US issuer verifying a US org. What I was trying to do was explain why getting new SSL certs isn't always as easy as a few clicks on a web page, if I was wrong then I'm sure we'd all love to hear why svn.boost.org's cert is taking so long.

At startssl.com one can get a basic SSL cert for free.. Certainly no snail mail required. -- Olaf

On Wed, Apr 8, 2015 at 9:37 AM, Josh Juran wrote:

On Apr 8, 2015, at 12:07 AM, Olaf van der Spek wrote:

...

At startssl.com one can get a basic SSL cert for free..

How much does it cost to revoke it?

ENOTIMPLEMENTED? Actually it is implemented and costs $25 :( -- Olaf

On Tue, Apr 7, 2015 at 7:07 PM, Niall Douglas wrote: ... I'm sure we'd all love to hear why svn.boost.org's

cert is taking so long.

Procrastination on my part. Dave Abrahams used to handle it, so it ended up in my lap. A couple of days ago I realized the Software Freedom Conservancy folks were who should be handling the cert. They already have a close relationship with a registrar, so everything is being handled electronically and quickly. --Beman

On Wed, Apr 8, 2015 at 2:27 PM, Beman Dawes wrote:

On Tue, Apr 7, 2015 at 7:07 PM, Niall Douglas wrote:

... I'm sure we'd all love to hear why svn.boost.org's

...

cert is taking so long.

Procrastination on my part. Dave Abrahams used to handle it, so it ended up in my lap.

A couple of days ago I realized the Software Freedom Conservancy folks were who should be handling the cert. They already have a close relationship with a registrar, so everything is being handled electronically and quickly.

How quickly? ;) -- Olaf

On 13 May 2015 at 11:08, Olaf van der Spek wrote:

It has been over a month and there's still no valid cert..

And now almost another fortnight … -- Bill Gallafent.