I hereby claim:
- I am alexrudd on github.
- I am arudd (https://keybase.io/arudd) on keybase.
- I have a public key whose fingerprint is 6A1B D505 F783 B273 4DAB 1A6C 4EB6 4D85 B50D 6A39
To claim this, I am signing this object:
package main | |
import ( | |
"fmt" | |
"github.com/aws/aws-sdk-go/aws/defaults" | |
) | |
func main() { | |
creds := defaults.CredChain(defaults.Config(), defaults.Handlers()) | |
// Validate credentials |
I hereby claim:
To claim this, I am signing this object:
package domain // domain layer | |
import "google.golang.org/protobuf/proto" | |
// Event represents a domain event that has been retreived from the event store. | |
type Event interface { | |
ID() string | |
Revision() uint64 | |
Data() proto.Message | |
} |
This came out of debugging the error net/http: TLS handshake timeout
which seemed to only be happening for certain endpoints. The thing that these endpoints all had in common was that they used Let's Encrypt as their CA. Some googling lead me to think it might have something to do with OCSP, so I wrote a small application that could make an OCSP request for a specified certificate.
The issue ended up being that the server experience the TLS handshake timeout had port 80 blocked. Port 80 was required to make the OCSP HTTP request to check that the certificate wasn't revoked.
go run ocsp.go ./cert.cer
package main | |
import ( | |
"context" | |
"encoding/json" | |
"flag" | |
"fmt" | |
"io" | |
"log" | |
"net/http" |