[kwlug-disc] Incorrect Let's Encrypt expiry notices

[Ronald Barnes]

Bob Jonkman wrote on 2017-11-03 01:52 PM:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Has anyone else using Let's Encrypt been getting these messages?

Hi Bob, et al,

I wonder if it's from the initial certs being issued via ... "certonly 
--webroot" (?) and later via ... "--apache" (?) options to certbot command?

Since the latter option was used, they seem to be keeping themselves 
up-to-date in a rather eerie manner: didn't see any cron jobs that would 
do the updates, no-one claimed to have updated them, yet they were all 
updated successfully.


Just some wild speculation.


Regards,

r b

> 
> On 2017-11-03 04:35 AM, Let's Encrypt Expiry Bot wrote:
>> Hello,
>>
>> Your certificate (or certificates) for the names listed below will
>> expire in 9 days (on 13 Nov 17 07:59 +0000). Please make sure to
>> renew your certificate before then, or visitors to your website
>> will encounter errors.
>>
>> bobjonkman.ca
> Yet when I look at the certificates list with the 'certbot' command I
> get this:
> 
>> webserver:~/ # certbot certificates Found the following certs:
>> Certificate Name: bobjonkman.ca Domains: bobjonkman.ca
>> www.bobjonkman.ca  Expiry Date: 2018-01-12 15:43:59+00:00 (VALID: 69
>> days) Certificate Path:
>> /etc/letsencrypt/live/bobjonkman.ca/fullchain.pem Private Key Path:
>> /etc/letsencrypt/live/bobjonkman.ca/privkey.pem
> I've had a few reminder notices for other certificates, and they
> haven't been accurate either.
> 
> Should I be worried the cert will exipre in 9 days? Have I set up
> something incorrectly? Is it a bug in certbot? Is it a bug with Let's
> Encrypt's reminder software?
> 
> Before I report this to Let's Encrypt I want to make sure I understand
> the situation.
> 
> - --Bob.
> 
> 
> - -- 
> Bob Jonkman<bjonkman at sobac.com>           Phone: +1-519-635-9413
> SOBAC Microcomputer Serviceshttp://sobac.com/sobac/
> Software   ---   Office & Business Automation   ---   Consulting
> GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
> Comment: Ensure confidentiality, authenticity, non-repudiability
> 
> iEYEARECAAYFAln81wEACgkQuRKJsNLM5equRQCgppZYyqdbdQr6UtWLeyr0xvjG
> vDMAn0sKQka8vWETKnsp9qzoRVMADpfT
> =3i5O
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>