Evgheni Dereveanchin created OVIRT-3008:
-------------------------------------------
Summary: IMAPS certificate expired on lists.ovirt.org
Key: OVIRT-3008
URL: https://ovirt-jira.atlassian.net/browse/OVIRT-3008
Project: oVirt - virtualization made easy
Issue Type: Bug
Reporter: Evgheni Dereveanchin
Assignee: infra
We've got reports about ticket creation issues from email. Looking at dovecot
logs the email handler tries to connect but disconnects immediately.
Connecting to port 993 shows an expired cert:
openssl s_client lists.ovirt.org:993
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = lists.ovirt.org
verify error:num=10:certificate has expired
notAfter=Jul 1 09:47:58 2020 GMT
verify return:1
depth=0 CN = lists.ovirt.org
notAfter=Jul 1 09:47:58 2020 GMT
verify return:1
---
Certificate chain
0 s:CN = lists.ovirt.org
i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
1 s:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
i:O = Digital Signature Trust Co., CN = DST Root CA X3
Looks like dovecot is not getting restarted after a new cert is issued. Leaving
as-is for now for further review. A service restart should theoretically be
enough to make use of the current cert.
--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100145)
_______________________________________________
Infra mailing list -- infra@ovirt.org
To unsubscribe send an email to infra-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/infra@ovirt.org/message/CT5AS4ERPTNWDEKFY6FPXP3YX2KXD4Y6/
