PEAR Certificate invalid due to Servercrash

Invalid SSL certificate on pear.php.net One of the PEAR servers had a harddisk crash and got replaced by an intermediate Server, which causes the certificate to be invalid at the moment. From the intermediate website: The server running pear.php.net had a fatal hard disk failure and gets replaced by a new machine this week. Until…

How to generate a new Diffie-Hellman Group

Recently there has been a new hack to break secured traffic when using the Diffie-Hellman key exchange in combination with a weak group param. To generate a new one, use this command:

To include it in Apache, use

…or nginx

More information can be found on this page: https://weakdh.org/sysadmin.html

Let's Encrypt - free, automated, open

Free, reliable, automated HTTPS certificates

Let’s Encrypt is a community-driven effort, so please consider helping out. Our code and protocol specs are available on GitHub. Remember, Let’s Encrypt isn’t operational yet. For now, these programs are only intended for development and testing. Stay tuned for more as we get closer to launching the CA in Q2 2015. Protocol The Let’s Encrypt CA talks…