←back to thread

F-Droid site certificate expired

(gitlab.com)
155 points kxxt | 3 comments | 31 Aug 25 12:16 UTC | HN request time: 0.511s | source
Show context
Bender ◴[31 Aug 25 13:18 UTC] No.45082943[source]▶
Licaon_Kter @licaon-kter 4 hours ago Maintainer Looks like while we have new certificates ( https://monitor.f-droid.org/services/tls-certs ) rotation failed. :(

They acknowledge rotation failed but it is still failing [1]. Perhaps something to do with how certs are rotated on their CDN?

[1] - https://www.ssllabs.com/ssltest/analyze.html?d=f%2ddroid.org...

replies(1): >>45087919 #
xantronix ◴[31 Aug 25 23:12 UTC] No.45087919[source]▶
Would not surprise me. Although it looks like F-Droid is hosted with Hetzner, I have encountered more than one failure to rotate certificates on account of Linode API changes, requiring manual update of the Python Linode API client to resolve.
replies(1): >>45089670 #
1. jimmaswell ◴[01 Sep 25 05:15 UTC] No.45089670[source]▶
> API changes

This should be an oxymoron. We've forgotten the point of an API as a profession and it's downright shameful when something this important breaks needlessly. Would it have been that hard to just keep supporting whatever API calls were in existence as e.g. "v1" and put their new stuff in "v2"?

replies(2): >>45090920 #>>45095028 #
2. hiimkeks ◴[01 Sep 25 09:04 UTC] No.45090920[source]▶
Maybe in this context the I in API stands for Implementation detail, so no guarantees are made.
3. cozzyd ◴[01 Sep 25 18:00 UTC] No.45095028[source]▶
In Python land API stands for Another Pointless Incompatibility