jcjones

#!/usr/bin/python

import socket
import struct
import sys

# We want unbuffered stdout so we can provide live feedback for
# each TTL. You could also use the "-u" flag to Python.
class flushfile(file):
    def __init__(self, f):

jcjones

Keybase proof

I hereby claim:

• I am jcjones on github.
• I am pug (https://keybase.io/pug) on keybase.
• I have a public key whose fingerprint is EA9F F90C 541F 3487 2CA0 26FB BD4E B26B 978D F884

To claim this, I am signing this object:

jcjones

These scripts help you to run Boulder + CFSSL in Docker in monolithic mode.

Easy use:

  git clone https://gist.github.com/ce9ca04e94cd9244e18a.git boulder-docker
  cd boulder-docker/
  ./boulder-docker.sh start

Note: You will need to execute `boulder-docker.sh` as a user with privileges to access Docker.

jcjones

#!/bin/bash
# run from Boulder dev directory

OCSP="http://ocsp.int-x1.letsencrypt.org/"
CA_CERT="test/test-ca.pem"
SERIAL=0x02000000000000016DD50EDFA6DAAF26

openssl ocsp -no_nonce -reqout /tmp/ocsp.req \
  -issuer ${CA_CERT} \
  -serial ${SERIAL} \

jcjones

#!/bin/bash
TOPIC=$(git symbolic-ref --short HEAD 2>/dev/null)
DEST=master

die() {
  echo $@
  exit 1
}

git pull --rebase origin ${DEST} || die

jcjones

jcjones

#!/bin/bash
# This is free and unencumbered software released into the public domain.
# 
# This script is designed to be run daily by cron. Please run it with randomness in its timing to
# avoid load spikes at Let's Encrypt. One example, running between midnight at 2 AM, would be:
#
# 0 0 * * * sleep $[(RANDOM % 115)+5]m ; /usr/sbin/letsencrypt-renew.sh
#
# If you aren't using Nginx, adjust the startServer and stopServer methods to suit. Also, you could
# use the webroot method.

jcjones

CREATE VIEW `le_certificate` AS
    SELECT 
        `certificate`.`certID` AS `certID`,
        `certificate`.`serial` AS `serial`,
        `certificate`.`issuerID` AS `issuerID`,
        `certificate`.`subject` AS `subject`,
        `certificate`.`notBefore` AS `notBefore`,
        `certificate`.`notAfter` AS `notAfter`
    FROM
        `certificate`

jcjones

From the blog post Early Impacts of Let's Encrypt

jcjones

SELECT
    AVG(count)
FROM
    (SELECT
        c.certID,
            (SELECT
                    COUNT(n.name)
                FROM
                    name AS n
                WHERE