Thursday, September 30, 2021

Re: Server certs expired higher up the chain, imaps and https

I think I read in some news (slashdot? HN?) semi-recently that a bunch
of old-style (?) Let's Encrypt certificates are expiring today.
Different software packages may handle it differently, as to how
they determine what to accept...? Sorry vague, but I something
on my phone with one site that I'm guessing is from the same cause.

On 2021-09-30 10:02:17-0700, Chris Bennett <cpb_misc@bennettconstruction.us> wrote:
> Hi,
>
> I'm getting that the certs are expired, but https works fine in Firefox,
> including when looking at the full chain.
>
>
> openssl s_client -servername mail.strengthcouragewisdom.rocks -connect mail.strengthcouragewisdom.rocks:imaps
>
> openssl s_client -servername mail.strengthcouragewisdom.rocks -connect mail.strengthcouragewisdom.rocks:https
>
> However are not happy. I force updated my ssl certs, syspatch, pkg_add
> -u and rebooted.
>
> I didn't rebuild dh.pem for dovecot.
>
> Is this just a DNS propagation issue?
> Or should I do something further myself?
>
> Thanks
> Chris Bennett
>

No comments:

Post a Comment