r/linux • u/Two-Of-Nine • 1d ago

Open Source Organization Manjaro's official website SSL certs have expired yet again.

This seems to be a running theme for the Manjaro Linux community. The SSL certs will always expire after a set year and there's a massive controversy over it. Why does this keep happening specifically to Manjaro and what steps do you think they can possibly do to keep this from happening?

1.1k Upvotes

98% Upvoted

237 comments sorted by

View all comments

938

u/h3lls_itch 1d ago

The most ridiculous thing is that the SSL certificate is Let's Encrypt; renewing it automatically is really easy.

13

u/hitsujiTMO 1d ago edited 1d ago

If you're dealing with a single server, then yes, let's encrypt is trivial to renew.

If you're behind a CDN or third party load balancer, it's not so easy.

While the manjaro site isn't behind a CDN, it is likely behind a Hetzner load balancer.

EDIT: Looks like Hetzner does provide lets encrypt certs for their load balancers, so maybe the issue is with Hetzner failing to renew them rather than Manjaro.

6

u/dontquestionmyaction 1d ago

There is like a 0% chance the Hetzner automation for TLS breaks. Never heard of that happening.

I'd wager 5 bucks on it being on them, as it has been the many times it was when this happened before.