Security News > 2020 > June > The state of OpenPGP key servers: Kristian, can you renew my certificate? A month later: Kristian? Ten days later: Too late, it’s expired

The state of OpenPGP key servers: Kristian, can you renew my certificate? A month later: Kristian? Ten days later: Too late, it’s expired
2020-06-24 00:05

"Hi all, Has anyone seen or heard from Kristian in the last month or so?" asked Todd Fleisher earlier this month - in fact, 11 June - on the main mailing list for an important cluster of OpenPGP key servers.

Fiskerstrand, who had seemingly gone AWOL, issues cryptographic certificates to servers that join the SKS keyserver pools, allowing these volunteer machines to share the load in securely handling key lookup requests.

This wasn't the first time Todd has tried to get Kristian to renew his certs: he had posted a similar message the previous month and heard nothing.

Now Todd was getting worried: "My certificate expires in 10 days, at which point I will no longer be able to serve requests for hkps.pool.sks-keyservers.net and will have to generate my own certificate so other clients can continue to securely access my server directly," he warned.

"The certificate has now expired and been replaced with a standard SSL certificate from Let's Encrypt. As such, it will no longer be able to field requests 25 days until Dan Austin's certificates expire on the remaining nodes in the pool."


News URL

https://go.theregister.com/feed/www.theregister.com/2020/06/24/openpgp_key_server/