2025-07-24 16:58:46 <veltas      > crc: Certificate for ilo.retroforth.org doesn't match ilo.retroforth.org apparently
2025-07-24 16:59:01 <veltas      > My corporate network's moaning
2025-07-24 17:22:36 <crc         > I updated the certificate, please let me know if it's still giving you problems
2025-07-24 21:46:03 <veltas      > I'll check tomorrow
2025-07-24 21:46:18 <veltas      > Corporate network's just very picky, I guess it makes sense for security reasons
2025-07-24 22:33:49 <veltas      > crc: I think the issue is you've only got one certificate issued, and the common name doesn't match ilo.retroforth.org, just retroforth.org
2025-07-24 22:34:12 <veltas      > I don't know if what you've done is strictly incorrect but my corporate security didn't like it, firefox doesn't seem to care
2025-07-24 22:34:34 <veltas      > E.g. for my site I've got two certificates issued for veltas.co.uk and www.veltas.co.uk
2025-07-24 22:34:41 <crc         > I extended it to add ilo.retroforth.org
2025-07-24 22:35:00 <veltas      > Ah okay
2025-07-24 22:35:25 <veltas      > Firefox's dev stuff isn't showing me that but I don't know how comprehensive that is
2025-07-24 22:36:17 <veltas      > I feel silly explaining it as you probably know more about it than me!
2025-07-24 22:36:57 <crc         > If it doesn't work, I'll do separate certs for each subdomain, but that's a bit of a headache to set up
2025-07-24 22:37:41 <veltas      > What part is the headache, configuring for httpd?
2025-07-24 22:39:14 <crc         > Yes. Not a big problem, just annoying
2025-07-24 22:40:55 <veltas      > I'm using apache so my headaches are all self-inflicted apparently
2025-07-24 22:41:22 <crc         > (I'll have to test with both the httpd and stunnel setups, since I do switch between using openbsd httpd and casket, depending on incoming traffic patterns on the server)
2025-07-24 22:42:03 <veltas      > I don't know better, I just remember always hearing 'apache' for web servers, and I didn't understand nginx when I went to set up my server
2025-07-24 22:42:33 <veltas      > And I've least attempted to configure it to handle high load so hopefully my site would handle a hug-of-death, we'll see if that ever happens
2025-07-24 22:43:58 <crc         > Apache is pretty good at scaling in my experience with it
2025-07-24 22:44:10 <veltas      > We are favicon 404 brothers apparently
2025-07-24 22:44:19 <crc         > I still have one server using it
2025-07-24 22:49:15 <crc         > I wonder how many favicon requests the server gets...
2025-07-24 22:51:53 <veltas      > Quite often I use the favicon requests to see when humans are visiting my site
2025-07-24 23:01:14 <crc         > I may need to turn logs pn for a bit to check
2025-07-24 23:08:42 <veltas      > I'm not sure whether I'm breaking a rule with my logs, with GDPR and all that
2025-07-24 23:08:52 <veltas      > The web used to be like the wild west
2025-07-24 23:09:18 <veltas      > A lot of sites you could find the access logs on their www
2025-07-24 23:10:18 <veltas      > I think with all the wordpress slop though you now tend to just find sites with loads of broken links and images as they struggle to wrangle the theme editor etc to behave