<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Troubleshooting on karl</title><link>https://karlquinsland.com/tags/troubleshooting/</link><description>Recent content in Troubleshooting on karl</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 01 Oct 2021 00:00:00 +0000</lastBuildDate><atom:link href="https://karlquinsland.com/tags/troubleshooting/index.xml" rel="self" type="application/rss+xml"/><item><title>Using new Lets Encrypt intermediate chain with SkyHole</title><link>https://karlquinsland.com/skyhole-expired-lets-encrypt-ca/</link><pubDate>Fri, 01 Oct 2021 00:00:00 +0000</pubDate><guid>https://karlquinsland.com/skyhole-expired-lets-encrypt-ca/</guid><description>&lt;p&gt;If you somehow missed it, one of the certificates used by Lets Encrypt chain of trust &lt;a href="https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/" target="_blank" rel="noopener noreffer "&gt;expired&lt;/a&gt; this week.
As expected, things broke&amp;hellip;. including my private, filtered DNS over TLS server - &lt;a href="https://github.com/kquinsland/skyhole/" target="_blank" rel="noopener noreffer "&gt;SkyHole&lt;/a&gt;. Below is a condensed form of my notes to create the exact document that I wish I had while trying to triage broken DNS on my phone.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; Implement solution 3 from &lt;a href="https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/" target="_blank" rel="noopener noreffer "&gt;this&lt;/a&gt; post.&lt;/p&gt;</description></item></channel></rss>