After I moved a domain to a new host, the original certbot certificate on the old host still included it, causing renewal errors. I explain that domains can’t be deleted from a certificate directly; instead you renew the certificate specifying only the domains you want to keep, and certbot warns about the ones being dropped. I include the commands for listing certificates and their domains, and for renewing with a reduced domain set...
I explain why I switched from manually downloading SSL certificates from PorkBun every 90 days to using Let’s Encrypt and Certbot, prompted in part by limitations with managing Australian .au domains. It covers installing Certbot on Ubuntu with NGINX, how it reads site configs to obtain and install certificates, and the systemd timer that renews them automatically...
How I got Chrome to offer saving the Proxmox root password, which it won’t do while the web UI’s self-signed certificate is untrusted. I cover grabbing the Proxmox root CA, importing it into the macOS Keychain and trusting it, allowing insecure content for the site, and clearing the cache to finally get the save prompt...
A short write-up of a mixed content error that appeared when I called the Open Notify ISS location API from a page hosted on GitHub Pages over HTTPS. I explain why browsers block insecure requests from secure pages, note that the API doesn’t support HTTPS and GitHub Pages can’t serve over HTTP, and describe switching to the wheretheiss.at API, which supports HTTPS, as the fix...
