by Luc Saffre · in Developers · assigned to tonis

Summary

Children

Comments

• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : NB regarding "And I now received a similar warning about expiring certificate for the avanti production server" : I created a separate ticket for this.
• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : Great, so at least the explanation is there: dovecot needs to restart when a certificate has been renewed. Yes, my TB fetches luc@LF again.
• 6 years, 7 months ago by tonis about #3539 (SSL certificates on LF also need renewal) : Looks like there is some overlap with name or something for cosi.lino-framework.org trying to resolve it, but I've hit a rate limit for failed renewals for this hour. Will try again soon.
  
• 6 years, 7 months ago by tonis about #3539 (SSL certificates on LF also need renewal) : After looking things over for a long time scratching my head, I see that the issue was dovecot again. after a restart of it it picked up the new cert. Going to do some google to see if there's a solution to this other than having dovcot restart being in a weekly/ daily cronjob
• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : It is my Thunderbird complaining that the certificate is invalid.
• 6 years, 7 months ago by tonis about #3539 (SSL certificates on LF also need renewal) : I just did a force renewal, there were some errors, but they were renewed... please forward the email with warning if no done already
• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : The issue is still there. And I now received a similar warning about expiring certificate for the avanti production server.
• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : Tonis, can you have a look at this?
• 6 years, 7 months ago by Luc Saffre about #3539 (SSL certificates on LF also need renewal) : Thunderbird says it cannot connect to mail.LF anymore. I guess it is as Tonis wrote in his email on 2020-03-04 : the certificate needs a forced renew. But it on LF there is no file /etc/letsencrypt/certbot-auto (but there are two bin scripts certbot and certbot-auto with different versions).