<html><head></head><body>When you renew a cert with Let's Encrypt, the "old" cert is still considered valid (i.e. if you were to copy the cert to a different system before renewing, you would be able to continue to use it after renewing the master copy afaik, since renewal does not also invalidate certs). As such, LE will continue to pester you about renewal even if you have already done so.<br>
<br>
Basically I've set up an mail filter to send all renewal notice email from LE to another folder so I don't have to be bothered with this.<br>
<br>
...Feel free to ignore these warning if you've already set up a Cron job for renewal for instance.<br>
<br>
- Keefer (who has been annoyed by LE far too much in the past)<br>
<br><br><div class="gmail_quote">On November 5, 2017 7:37:26 PM EST, Raymond Chen <raymondchen625@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">I checked with Chrome, Firefox and Safari. They were all fine, with expiry date Jan. 12, 2018. Your warning seems from "Let's <span style="font-size:12.8px">Encrypt Expiry Bot", maybe it doesn't make a live request before sending the warning?</span><div><span style="font-size:12.8px"><br /></span></div><div><span style="font-size:12.8px"><br /></span></div></div><div class="gmail_extra"><br /><div class="gmail_quote">On Fri, Nov 3, 2017 at 4:56 PM, Khalid Baheyeldin <span dir="ltr"><<a href="mailto:kb@2bits.com" target="_blank">kb@2bits.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>Yes. I get them all the time. <br /><br /></div>The problem is that it still warns about the old certificate even if you have renewed it. <br /></div><div><br /></div>Did not find a way to turn this off, but I did not researched it either.<br /></div><div class="gmail_extra"><div><div class="h5"><br /><div class="gmail_quote">On Fri, Nov 3, 2017 at 4:52 PM, Bob Jonkman <span dir="ltr"><<a href="mailto:bjonkman@sobac.com" target="_blank">bjonkman@sobac.com</a>></span> wrote:<br /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br />
Hash: SHA1<br />
<br />
Has anyone else using Let's Encrypt been getting these messages?<br />
<br />
On 2017-11-03 04:35 AM, Let's Encrypt Expiry Bot wrote:<br />
> Hello,<br />
><br />
> Your certificate (or certificates) for the names listed below will<br />
> expire in 9 days (on 13 Nov 17 07:59 +0000). Please make sure to<br />
> renew your certificate before then, or visitors to your website<br />
> will encounter errors.<br />
><br />
> <a href="http://bobjonkman.ca" rel="noreferrer" target="_blank">bobjonkman.ca</a><br />
<br />
Yet when I look at the certificates list with the 'certbot' command I<br />
get this:<br />
<br />
> webserver:~/ # certbot certificates Found the following certs:<br />
> Certificate Name: <a href="http://bobjonkman.ca" rel="noreferrer" target="_blank">bobjonkman.ca</a> Domains: <a href="http://bobjonkman.ca" rel="noreferrer" target="_blank">bobjonkman.ca</a><br />
> <a href="http://www.bobjonkman.ca" rel="noreferrer" target="_blank">www.bobjonkman.ca</a> Expiry Date: 2018-01-12 15:43:59+00:00 (VALID: 69<br />
> days) Certificate Path:<br />
> /etc/letsencrypt/live/<a href="http://bobjonkman.ca/fullchain.pem" rel="noreferrer" target="_blank">bobjonkm<wbr />an.ca/fullchain.pem</a> Private Key Path:<br />
> /etc/letsencrypt/live/<a href="http://bobjonkman.ca/privkey.pem" rel="noreferrer" target="_blank">bobjonkm<wbr />an.ca/privkey.pem</a><br />
<br />
I've had a few reminder notices for other certificates, and they<br />
haven't been accurate either.<br />
<br />
Should I be worried the cert will exipre in 9 days? Have I set up<br />
something incorrectly? Is it a bug in certbot? Is it a bug with Let's<br />
Encrypt's reminder software?<br />
<br />
Before I report this to Let's Encrypt I want to make sure I understand<br />
the situation.<br />
<br />
- --Bob.<br />
<br />
<br />
- --<br />
Bob Jonkman <<a href="mailto:bjonkman@sobac.com" target="_blank">bjonkman@sobac.com</a>> Phone: <a href="tel:%2B1-519-635-9413" value="+15196359413" target="_blank">+1-519-635-9413</a><br />
SOBAC Microcomputer Services <a href="http://sobac.com/sobac/" rel="noreferrer" target="_blank">http://sobac.com/sobac/</a><br />
Software --- Office & Business Automation --- Consulting<br />
GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA<br />
<br />
-----BEGIN PGP SIGNATURE-----<br />
Version: GnuPG v2<br />
Comment: Ensure confidentiality, authenticity, non-repudiability<br />
<br />
iEYEARECAAYFAln81wEACgkQuRKJsN<wbr />LM5equRQCgppZYyqdbdQr6UtWLeyr0<wbr />xvjG<br />
vDMAn0sKQka8vWETKnsp9qzoRVMADp<wbr />fT<br />
=3i5O<br />
-----END PGP SIGNATURE-----<br />
<br />
______________________________<wbr />_________________<br />
kwlug-disc mailing list<br />
<a href="mailto:kwlug-disc@kwlug.org" target="_blank">kwlug-disc@kwlug.org</a><br />
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">http://kwlug.org/mailman/listi<wbr />nfo/kwlug-disc_kwlug.org</a><br />
</blockquote></div><br /><br clear="all" /><br /></div></div><span class="HOEnZb"><font color="#888888">-- <br /><div class="m_-3725303657161540118gmail_signature" data-smartmail="gmail_signature">Khalid M. Baheyeldin<br /><a href="http://2bits.com" target="_blank">2bits.com</a>, Inc.<br />Fast Reliable Drupal<br />Drupal optimization, development, customization and consulting.<br />Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra<br />Simplicity is the ultimate sophistication. -- Leonardo da Vinci<br />For every complex problem, there is an answer that is clear, simple, and wrong." -- H.L. Mencken<br /></div>
</font></span></div>
<br />______________________________<wbr />_________________<br />
kwlug-disc mailing list<br />
<a href="mailto:kwlug-disc@kwlug.org">kwlug-disc@kwlug.org</a><br />
<a href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org" rel="noreferrer" target="_blank">http://kwlug.org/mailman/<wbr />listinfo/kwlug-disc_kwlug.org</a><br />
<br /></blockquote></div><br /></div>
</blockquote></div></body></html>