Evgheni Dereveanchin created OVIRT-3008:
-------------------------------------------
Summary: IMAPS certificate expired on
lists.ovirt.org
Key: OVIRT-3008
URL:
https://ovirt-jira.atlassian.net/browse/OVIRT-3008
Project: oVirt - virtualization made easy
Issue Type: Bug
Reporter: Evgheni Dereveanchin
Assignee: infra
We've got reports about ticket creation issues from email. Looking at dovecot logs the
email handler tries to connect but disconnects immediately.
Connecting to port 993 shows an expired cert:
openssl s_client lists.ovirt.org:993
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN =
lists.ovirt.org
verify error:num=10:certificate has expired
notAfter=Jul 1 09:47:58 2020 GMT
verify return:1
depth=0 CN =
lists.ovirt.org
notAfter=Jul 1 09:47:58 2020 GMT
verify return:1
---
Certificate chain
0 s:CN =
lists.ovirt.org
i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
1 s:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
i:O = Digital Signature Trust Co., CN = DST Root CA X3
Looks like dovecot is not getting restarted after a new cert is issued. Leaving as-is for
now for further review. A service restart should theoretically be enough to make use of
the current cert.
--
This message was sent by Atlassian Jira
(v1001.0.0-SNAPSHOT#100145)