Thursday, October 22, 2020

Re: ssl/libssl certificate validation broken?

Daniel Jakots <danj@chown.me> wrote:

> On Thu, 22 Oct 2020 21:49:20 -0500, "Rafael Possamai"
> <rafael@thinkpad.io> wrote:
>
> > >Hi Bob, it was in the middle of the night and I got quite kinda
> > >stressed because all services depending on our ldap proxy stopped
> > >working after the upgrade and it took me a while to figure the
> > >problem out.
> >
> > Perhaps this is unsolicited advice, but maybe you can setup a test
> > system first, perform major upgrade on it to make sure everything
> > works. If so, then do it in production.
> >
>
> Even better, try -current a few weeks before release (a possible hint
> is -beta). This way you can get any encountered bug fixed in time for
> -release. Your prod but also every one else will benefit from it.

It's very good advice. I can't speak for Bob, but I've been unable
to sleep during this outage.

No comments:

Post a Comment