Re: Expired Fedora Webpage Cert?

[Kevin Becker <kevin@xxxxxxxxxxxxxxx>]

On Wed, 2021-07-28 at 08:43 -0700, Doug H. wrote:

On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:

On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:

Is it just me, or is the web page cert expired this morning at

https://askbot.fedoraproject.org/ ?

Looks like it.  This is usually how I check these things:

$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null

2>/dev/null | openssl x509 -noout -enddate

notAfter=Jul 26 23:11:05 2021 GMT

So it expired a little less than two days ago.

It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.

They just recently shut down the ACME V1 API.  I suspect they were running an older ACME client that needs to be updated (ask me how I know).

>
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure