On Wed, 2021-07-28 at 08:43 -0700, Doug H. wrote:
On Wed, Jul 28, 2021, at 8:28 AM, Jonathan Billings wrote:
> On Wed, Jul 28, 2021 at 11:06:47AM -0400, John Mellor wrote:
> > Is it just me, or is the web page cert expired this morning at
> >
https://askbot.fedoraproject.org/ ?
>
> Looks like it. This is usually how I check these things:
>
> $ openssl s_client -connect askbot.fedoraproject.org:443 <
> /dev/null
> 2>/dev/null | openssl x509 -noout -enddate
> notAfter=Jul 26 23:11:05 2021 GMT
>
> So it expired a little less than two days ago.
It is a Let's Encrypt cert so they are only good for three months and
should be auto renewed by a cronjob. I suspect the cronjob needs to
be looked at.
They just recently shut down the ACME V1 API. I suspect they were
running an older ACME client that needs to be updated (ask me how I
know).