Expired Fedora Webpage Cert?

[John Mellor]

Is it just me, or is the web page cert expired this morning at 
https://askbot.fedoraproject.org/ ?

[Garry T. Williams]

On Wednesday, July 28, 2021 11:06:47 AM EDT John Mellor wrote:
>  Is it just me, 
No, it is not just you.

>  or is the web page cert expired this morning at 
>  https://askbot.fedoraproject.org/ ? 
-- 
Garry T. Williams

[Jonathan Billings]

On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
>  Is it just me, or is the web page cert expired this morning at
>  https://askbot.fedoraproject.org/ ? 
Looks like it.  This is usually how I check these things:

$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null |
openssl x509 -noout -enddate
notAfter=Jul 26 23:11:05 2021 GMT

So it expired a little less than two days ago.

-- 
Jonathan Billings <billings(a)negate.org&gt;

[Doug H.]

On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:
>  On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
>  > Is it just me, or is the web page cert expired this morning at
>  > https://askbot.fedoraproject.org/ ?
>  
>  Looks like it.  This is usually how I check these things:
>  
>  $ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 
>  2>/dev/null | openssl x509 -noout -enddate
>  notAfter=Jul 26 23:11:05 2021 GMT
>  
>  So it expired a little less than two days ago. 

It is a Let's Encrypt cert so they are only good for three months and should be auto
renewed by a cronjob. I suspect the cronjob needs to be looked at.


-- 
Doug Herr
fedoraproject.org(a)wombatz.com

[Matthew Miller]

On Wed, Jul 28, 2021 at 08:43:54AM -0700, Doug H. wrote:
>  > > Is it just me, or is the web page cert expired this morning
> at
>  > > https://askbot.fedoraproject.org/ ?
>  > 
>  > Looks like it.  This is usually how I check these things:
>  > 
>  > $ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 
>  > 2>/dev/null | openssl x509 -noout -enddate
>  > notAfter=Jul 26 23:11:05 2021 GMT
>  > 
>  > So it expired a little less than two days ago.
>  
>  It is a Let's Encrypt cert so they are only good for three months and
>  should be auto renewed by a cronjob. I suspect the cronjob needs to be
>  looked at. 
In this case, it's out of our hands -- we contracted with the maintainer of
the Askbot software to run that instance for us and to do some feature
development. That development never happened, and the whole askbot project
has been functionally dead since 2016.

If there's some information in old Q&A that would be worth saving, please
consider contributing it to
https://docs.fedoraproject.org/en-US/quick-docs/, or to the new Ask Fedora
at https://ask.fedoraproject.org/.

If there are old links to the askbot site that need to be updated, please
either update them or flag them so someone with permissions to edit wherever
the old link is found can do it.

-- 
Matthew Miller
<mattdm(a)fedoraproject.org&gt;
Fedora Project Leader

[Kevin Becker]

On Wed, 2021-07-28 at 08:43 -0700, Doug H. wrote:
>  On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:
>  > On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
>  > > Is it just me, or is the web page cert expired this morning at
>  > > https://askbot.fedoraproject.org/ ?
>  > 
>  > Looks like it.  This is usually how I check these things:
>  > 
>  > $ openssl s_client -connect askbot.fedoraproject.org:443 <
>  > /dev/null 
>  > 2>/dev/null | openssl x509 -noout -enddate
>  > notAfter=Jul 26 23:11:05 2021 GMT
>  > 
>  > So it expired a little less than two days ago.
>  
>  
>  It is a Let's Encrypt cert so they are only good for three months and
>  should be auto renewed by a cronjob. I suspect the cronjob needs to
>  be looked at.
>   
They just recently shut down the ACME V1 API.  I suspect they were
running an older ACME client that needs to be updated (ask me how I
know).

[Joe Zeff]

On 7/29/21 7:25 AM, Kevin Becker wrote:
>  They just recently shut down the ACME V1 API.  I suspect they were 
>  running an older ACME client that needs to be updated (ask me how I know). 
That might be good news if you're a coyote.

[Tim]

Kevin Becker:
> > They just recently shut down the ACME V1 API.  I suspect they
> were 
> > running an older ACME client that needs to be updated (ask me how I
> > know). 
Joe Zeff:
>  That might be good news if you're a coyote.
>   
Beep beep, yeah!  (tangential Beatles diversion)


-- 
 
uname -rsvp
Linux 5.11.22-100.fc32.x86_64 #1 SMP Wed May 19 18:58:25 UTC 2021 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.