Category Archives: Information

General news/information to the CAcert community or about security in general

Ich bin ein Held von CAcert

Sie sind ein Held, Sie wollen Ihre #CAcert #Gemeinschaft während der #Frühjahrsoffensive unterstützen. Sie sind bereit, sich um eine von 72 kleinen Aufgaben zu kümmern, die seit Monaten auf ihre Erledigung warten. So geht’s mit dem Bugtracker: Unter https://wiki.cacert.org/Mantis-Crash-Course/DE ist es in einfachen Worten beschrieben.

Como ajudar a CAcert

Você é um herói, quer apoiar sua #comunidade #CAcert durante a #Ofensiva da #Primavera. Você está disposto a cuidar de uma das 72 pequenas tarefas que estão esperando para serem concluídas há meses. É assim que se lida com o rastreador de bugs: ele é descrito em palavras simples em https://wiki.cacert.org/Mantis-Crash-Course/PT

Voici l’offensive du printemps de CACert

C’est l’#Offensive de printemps: Tous ceux qui n’ont pas besoin de terminer un travail en cours sont invités à #participer à l’Offensive de printemps: Prenez une seule des 72 petites tâches qui attendent d’être achevées depuis des mois, voire des années. Soyez l’un des 72 #héros qui prennent la main et font ainsi avancer #CAcert d’un grand pas!

Behind the scenes …

… we’ve just activated our own OCSP-resolver on our new arm64-servers.

This sounds a little bit unspectacular, but it’s a big milestone while replacing hard- and software within our environment as the old OCSP-resolver-software could not be ported to a recent debian and arm64-environment.

All other critical services (like Nameserver and CRL-Serving) were already moved successfully to our new power-saving machines (2 Raspberry Pi4) in the last weeks/months. OCSP needed some development and testing.

The virtual machines in the old environment are now stopped, within the next days the (power-consuming) sun3-server will then get it’s final shutdown and will be removed from CAcert-Rack during the next visit at the datacenter.

Our main website and signer-software will still be kept running on dedicated servers.

Upcoming Changes for www.cacert.org

Today we switched the connection to our main website as a preparation for a “bigger” change. Unfortunately this (temporary) change is not IPv6-capable, so only IPv4 is working currently.

Over the weekend we plan to move www.cacert.org to another server for a more recent environment and add a second firewall to our rack. During this server-transition you may face some issues while using www.cacert.org, after the weekend the services should be normal again.

Early next week we’ll enable IPv6 again for our main website (maybe by using a new IPv6-Address, but that’s not yet decided).

All other services (like blog/wiki/bugs/…) should remain active as usual as there is currently no planned update.