[kwlug-disc] Incorrect Let's Encrypt expiry notices
Ronald Barnes
ron at ronaldbarnes.ca
Sun Nov 5 20:17:55 EST 2017
Bob Jonkman wrote on 2017-11-03 01:52 PM:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Has anyone else using Let's Encrypt been getting these messages?
Hi Bob, et al,
I wonder if it's from the initial certs being issued via ... "certonly
--webroot" (?) and later via ... "--apache" (?) options to certbot command?
Since the latter option was used, they seem to be keeping themselves
up-to-date in a rather eerie manner: didn't see any cron jobs that would
do the updates, no-one claimed to have updated them, yet they were all
updated successfully.
Just some wild speculation.
Regards,
r b
>
> On 2017-11-03 04:35 AM, Let's Encrypt Expiry Bot wrote:
>> Hello,
>>
>> Your certificate (or certificates) for the names listed below will
>> expire in 9 days (on 13 Nov 17 07:59 +0000). Please make sure to
>> renew your certificate before then, or visitors to your website
>> will encounter errors.
>>
>> bobjonkman.ca
> Yet when I look at the certificates list with the 'certbot' command I
> get this:
>
>> webserver:~/ # certbot certificates Found the following certs:
>> Certificate Name: bobjonkman.ca Domains: bobjonkman.ca
>> www.bobjonkman.ca Expiry Date: 2018-01-12 15:43:59+00:00 (VALID: 69
>> days) Certificate Path:
>> /etc/letsencrypt/live/bobjonkman.ca/fullchain.pem Private Key Path:
>> /etc/letsencrypt/live/bobjonkman.ca/privkey.pem
> I've had a few reminder notices for other certificates, and they
> haven't been accurate either.
>
> Should I be worried the cert will exipre in 9 days? Have I set up
> something incorrectly? Is it a bug in certbot? Is it a bug with Let's
> Encrypt's reminder software?
>
> Before I report this to Let's Encrypt I want to make sure I understand
> the situation.
>
> - --Bob.
>
>
> - --
> Bob Jonkman<bjonkman at sobac.com> Phone: +1-519-635-9413
> SOBAC Microcomputer Serviceshttp://sobac.com/sobac/
> Software --- Office & Business Automation --- Consulting
> GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
> Comment: Ensure confidentiality, authenticity, non-repudiability
>
> iEYEARECAAYFAln81wEACgkQuRKJsNLM5equRQCgppZYyqdbdQr6UtWLeyr0xvjG
> vDMAn0sKQka8vWETKnsp9qzoRVMADpfT
> =3i5O
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
More information about the kwlug-disc
mailing list