> > I think something is off in your certs. Running
> >
> > Maybe you aren't using the fullchain and instead present the cert
> > for just your host? It doesn't show the "middle" cert from LE. This
> > is the chain for a correctly verified (from `openssl s_client`
> > point of view) cert issued by LE
>
> Darn, it was my stupidity. My script to renew the LE certificate
> copied the single cert into the prosody directory instead of the full
> chain. I fixed the script and now it works as expected. Thanks!
Lucas, thank you for your investigation!
> @Florian: Sorry for the noise!
No problem, asking is good and welcome.
--
greetings,
Florian Viehweger
No comments:
Post a Comment