The wonders of Let’s Encrypt and Certbot in relation to StartSSL/StartCom issues

All websites should be encrypted. Definitely don’t do anything secure over an unencrypted connection.

To support that the site has always had SSL setup. However I just discovered that the SSL certs the site uses by StartSSL have been revoked by all major browsers it appears!

A little digging for a new free SSL cert site came up with Let’s Encrypt. That in combo with Certbot is SUPER EASY to get certs and keep them up to date. All for free! I’ll probably even donate it’s so easy now!

The trick for certbot for me was to use the standalone check so I didn’t have to mess with the NGINX server’s folder security.

$ certbot certonly --standalone -d example.com -d www.example.com

Then you just point NGINX to the PEM files it creates and you’re set!

ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

EASY PEASY! Now Chrome and Safari work again!

Then to renew all the certs at once you can run this

certbot renew --pre-hook "service nginx stop" --post-hook "service nginx start"

Bad ass taxidermy

Carl Akeley, considered the father of modern taxidermy, was attacked by this leopard he poses with.

The leopard latched on to Akeley’s left hand, chomping down with all its might, and kicking at him with its back legs like a rabid 80-pound feral housecat intent on brutally mutilating him beyond recognition and burying his body in the back yard. When his attempts to pull his hand out of the leopards’ jaws only made the creature bite down harder, Akeley, locked in a life or death fistfight with one of the most perfect predators nature ever created, did one of the most insane things ever – he punched his fist further into the leopard’s mouth.

Yes, you are reading that correctly. Carl Akeley, noted philanthropist and respected wildlife conservationist, punched a fucking leopard in the esophagus from the inside. The leopard gagged, Akeley pulled his hand out, and then he took the thing, bodyslammed it to the ground, and jumped on it with both knees, crushing it to death. Akeley, bleeding profusely from horrific wounds on both hands, clawed to shit, still recovering from a recent battle with malaria, and barely able to stand, then picked up the leopard (despite a shattered hand), threw it over his shoulder, walked back to camp with it, and taxidermized it for a museum exhibit

From here: http://www.badassoftheweek.com/akeley.html

Duplicity restore

As a part of restoring all the posts from the old Drupal server I finally had to use Duplicity to restore a backup. Always wondered how it’d actually work. Twas easy! This restores a backup from 9/1/2014 to /tmp/restore.

duplicity restore –time 2014-09-01 s3+http://rack_deb/drupal /tmp/restore2