Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?
On Wednesday, July 28, 2021 11:06:47 AM EDT John Mellor wrote:
Is it just me,
No, it is not just you.
or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?
On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?
Looks like it. This is usually how I check these things:
$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT
So it expired a little less than two days ago.
On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:
On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?
Looks like it. This is usually how I check these things:
$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT
So it expired a little less than two days ago.
It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.
On Wed, Jul 28, 2021 at 08:43:54AM -0700, Doug H. wrote:
Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/ ?
Looks like it. This is usually how I check these things:
$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT
So it expired a little less than two days ago.
It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.
In this case, it's out of our hands -- we contracted with the maintainer of the Askbot software to run that instance for us and to do some feature development. That development never happened, and the whole askbot project has been functionally dead since 2016.
If there's some information in old Q&A that would be worth saving, please consider contributing it to https://docs.fedoraproject.org/en-US/quick-docs/, or to the new Ask Fedora at https://ask.fedoraproject.org/.
If there are old links to the askbot site that need to be updated, please either update them or flag them so someone with permissions to edit wherever the old link is found can do it.
On Wed, 2021-07-28 at 08:43 -0700, Doug H. wrote:
On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:
On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
Is it just me, or is the web page cert expired this morning at https://askbot.fedoraproject.org/%C2%A0?
Looks like it. This is usually how I check these things:
$ openssl s_client -connect askbot.fedoraproject.org:443 < /dev/null 2>/dev/null | openssl x509 -noout -enddate notAfter=Jul 26 23:11:05 2021 GMT
So it expired a little less than two days ago.
It is a Let's Encrypt cert so they are only good for three months and should be auto renewed by a cronjob. I suspect the cronjob needs to be looked at.
They just recently shut down the ACME V1 API. I suspect they were running an older ACME client that needs to be updated (ask me how I know).
Kevin Becker:
They just recently shut down the ACME V1 API. I suspect they were running an older ACME client that needs to be updated (ask me how I know).
Joe Zeff:
That might be good news if you're a coyote.
Beep beep, yeah! (tangential Beatles diversion)
-
Doug H. -
Garry T. Williams -
Joe Zeff -
John Mellor -
Jonathan Billings -
Kevin Becker -
Matthew Miller -
Tim