Expired Fedora Webpage Cert? - users - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

1995

1994

1993

1992

1991

1990

1989

1988

1987

1986

1985

1984

1983

1982

1981

1980

Expired Fedora Webpage Cert?

New fc33/FF 90.0/amazon.com issue

Fedora 34 boot screen

John Mellor

Wednesday, 28 July 2021 Wed, 28 Jul '21

10:06 a.m.

Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?

Reply

Show replies by thread

Garry T. Williams

Wednesday, 28 July Wed, 28 Jul

10:25 a.m.

On Wednesday, July 28, 2021 11:06:47 AM EDT John Mellor wrote:

Is it just me,

No, it is not just you.

or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?

-- Garry T. Williams

Reply

Jonathan Billings

10:28 a.m.

On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:

Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?

Looks like it. This is usually how I check these things: $ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT So it expired a little less than two days ago. -- Jonathan Billings <billings(a)negate.org>

Reply

Doug H.

10:43 a.m.

On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:

On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote: > Is it just me, or is the web page cert expired this morning at > https://askbot.fedoraproject.org/ ? Looks like it. This is usually how I check these things: $ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT So it expired a little less than two days ago.

It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at. -- Doug Herr fedoraproject.org(a)wombatz.com

Reply

Matthew Miller

1:43 p.m.

On Wed, Jul 28, 2021 at 08:43:54AM -0700, Doug H. wrote:

> > Is it just me, or is the web page cert expired this morning at > > https://askbot.fedoraproject.org/ ? > > Looks like it. This is usually how I check these things: > > $ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null > 2>/dev/null | openssl x509 -noout -enddate > notAfter=Jul 26 23:11:05 2021 GMT > > So it expired a little less than two days ago. It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.

In this case, it's out of our hands -- we contracted with the maintainer of the Askbot software to run that instance for us and to do some feature development. That development never happened, and the whole askbot project has been functionally dead since 2016. If there's some information in old Q&A that would be worth saving, please consider contributing it to https://docs.fedoraproject.org/en-US/quick-docs/, or to the new Ask Fedora at https://ask.fedoraproject.org/. If there are old links to the askbot site that need to be updated, please either update them or flag them so someone with permissions to edit wherever the old link is found can do it. -- Matthew Miller <mattdm(a)fedoraproject.org> Fedora Project Leader

Reply

Kevin Becker

Thursday, 29 July Thu, 29 Jul

8:25 a.m.

On Wed, 2021-07-28 at 08:43 -0700, Doug H. wrote:

On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote: > On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote: > > Is it just me, or is the web page cert expired this morning at > > https://askbot.fedoraproject.org/ ? > > Looks like it. This is usually how I check these things: > > $ openssl s_client -connect askbot.fedoraproject.org:443 < > /dev/null > 2>/dev/null | openssl x509 -noout -enddate > notAfter=Jul 26 23:11:05 2021 GMT > > So it expired a little less than two days ago. It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.

They just recently shut down the ACME V1 API. I suspect they were running an older ACME client that needs to be updated (ask me how I know).

Reply

Joe Zeff

12:25 p.m.

On 7/29/21 7:25 AM, Kevin Becker wrote:

They just recently shut down the ACME V1 API. I suspect they were running an older ACME client that needs to be updated (ask me how I know).

That might be good news if you're a coyote.

Reply

Tim

Friday, 30 July Fri, 30 Jul

1:41 a.m.

Kevin Becker:

> They just recently shut down the ACME V1 API. I suspect they were > running an older ACME client that needs to be updated (ask me how I > know).

Joe Zeff:

That might be good news if you're a coyote.

Beep beep, yeah! (tangential Beatles diversion) -- uname -rsvp Linux 5.11.22-100.fc32.x86_64 #1 SMP Wed May 19 18:58:25 UTC 2021 x86_64 Boilerplate: All unexpected mail to my mailbox is automatically deleted. I will only get to see the messages that are posted to the mailing list.

Reply

1015

days inactive

1017

days old

users@lists.fedoraproject.org

Manage subscription

7 comments

8 participants

tags (0)

participants (8)

Doug H.
Garry T. Williams
Joe Zeff
John Mellor
Jonathan Billings
Kevin Becker
Matthew Miller
Tim