Hacker News new | ask | show | jobs
by boyter 3266 days ago
My number one complaint with Concourse (which I suspect is due to Go) is that you need to have it hosted with a valid TLS/SSL cert in order to use the fly command. At least this was an issue in the 2.6.0 days, but I couldn't see anything to change this in the recent versions.

This is rather annoying if you want to run a copy on your local network say at home. Its very frustrating because the fly command solves the biggest issue with IWOMM (it works on my machine) by allowing you to run code and tests on another machine before committing anything.

I think from memory I tried using self signed certs and this also had issues for one reason or another.

That said it is still the best CI system I have used to date.

4 comments

you can use the login command with -k (--insecure) to skip the SSL verification.
I issue valid TLS certs for my internal servers using letsencrypt DNS challenge (there is a nice cloudflare hook for dehydrated that I use). Runs on cron, haven't had to worry about it once I set it up. (Haven't tried with concourse, but don't think that would be a problem)
Do you worry about your internal names being exposed via Certificate Transparency?
Not much.
> My number one complaint with Concourse (which I suspect is due to Go) is that you need to have it hosted with a valid TLS/SSL cert in order to use the fly command.

Nit: Not familiar with Concourse, but this is a design decision. Go stdlib let's you bypass SSL/TLS verification.

I must be doing something wrong, but I have been running Concourse without a cert since 1.6.0.