• 0 Posts
  • 23 Comments
Joined 2 years ago
cake
Cake day: January 16th, 2024

help-circle



  • Correct, though to be pedantic anyone can be a CA- you just generate a cert with the right bits to say it’s a ca certificate and then use it to sign any other certificate you want.

    But the only devices that will consider your signature worth anything are ones you also install your ca certificate on. So it’s useful and common in internal networks but isn’t really what is being asked here.

    The hard part is getting in the root CA store of operating systems and browsers. As far as I know they are all maintained independently with their own requirements.

















  • You should look into IPMI console access, that’s usually the real ‘only way out of this’

    SSH has a lot of complexity but it’s still the happy path with a lot of dependencies that can get in your way- is it waiting to do a reverse dns lookup on your IP? Trying to read files like your auth key from a saturated or failing disk? syncing logs?

    With that said i am surprised people are having responsiveness issues under full load, are you sure you weren’t running out of memory and relying heavily on swapping?