starred/modoboa-modoboa

Fork 0

mirror of https://github.com/modoboa/modoboa.git synced 2026-04-26 01:16:01 +03:00

[GH-ISSUE #1674] Certificate for api.modoboa.org expired #1317

New issue

Closed

opened 2026-02-27 11:16:29 +03:00 by kerem · 6 comments

kerem commented

2026-02-27 11:16:29 +03:00

Owner

Originally created by @tschuettler on GitHub (Feb 12, 2019).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/1674

Steps to reproduce

cron job manage.py communicate_with_public_api fails with CommandError: Failed to retrieve versions from the API.

Current behavior

* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server accepted to use http/1.1
* Server certificate:
*  subject: CN=api.modoboa.org
*  start date: Nov 13 22:00:15 2018 GMT
*  expire date: Feb 11 22:00:15 2019 GMT
*  issuer: C=US; O=Let's Encrypt; CN=Let's Encrypt Authority X3
*  SSL certificate verify result: certificate has expired (10), continuing anyway.

Expected behavior

valid certificate

Originally created by @tschuettler on GitHub (Feb 12, 2019). Original GitHub issue: https://github.com/modoboa/modoboa/issues/1674 # Steps to reproduce cron job `manage.py communicate_with_public_api` fails with `CommandError: Failed to retrieve versions from the API.` # Current behavior ``` * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=api.modoboa.org * start date: Nov 13 22:00:15 2018 GMT * expire date: Feb 11 22:00:15 2019 GMT * issuer: C=US; O=Let's Encrypt; CN=Let's Encrypt Authority X3 * SSL certificate verify result: certificate has expired (10), continuing anyway. ``` # Expected behavior valid certificate

kerem closed this issue

2026-02-27 11:16:29 +03:00

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@WLR86 commented on GitHub (Feb 12, 2019):

This is what happens when relying on certbot... Been there, done that. Certbot doesn't automatically renew certs, it just FAILS to do so, and at the end of the day, you have to troubleshoot the issue, fix it, and renew your certs MANUALLY.

Or use acmetool, and forget about it, it just does the job.
(Sorry for this rant, but I wasted so much time using certbot I can't take it anymore)

@WLR86 commented on GitHub (Feb 12, 2019): This is what happens when relying on certbot... Been there, done that. Certbot doesn't automatically renew certs, it just FAILS to do so, and at the end of the day, you have to troubleshoot the issue, fix it, and renew your certs MANUALLY. Or use acmetool, and forget about it, it just does the job. (Sorry for this rant, but I wasted so much time using certbot I can't take it anymore)

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@tonioo commented on GitHub (Feb 25, 2019):

Actually, the certificate renew worked but nginx reloading failed... Need to figure out why.

@tonioo commented on GitHub (Feb 25, 2019): Actually, the certificate renew worked but nginx reloading failed... Need to figure out why.

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@WLR86 commented on GitHub (Jul 26, 2019):

Once again... Is there any known workaround ?

@WLR86 commented on GitHub (Jul 26, 2019): Once again... Is there any known workaround ?

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@WLR86 commented on GitHub (Jul 29, 2019):

Ok I thought I could redirect the error to /dev/null :

/etc/cron.d/modoboa
[...]
# Public API communication
0       *       *       *       *       root    $PYTHON $INSTANCE/manage.py communicate_with_public_api 2>/dev/null
[...]

So far so good. Obviously the api call still fails, but at east I don't get spammed when it does.

@WLR86 commented on GitHub (Jul 29, 2019): Ok I thought I could redirect the error to /dev/null : ``` /etc/cron.d/modoboa [...] # Public API communication 0 * * * * root $PYTHON $INSTANCE/manage.py communicate_with_public_api 2>/dev/null [...] ``` So far so good. Obviously the api call still fails, but at east I don't get spammed when it does.

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@Arvedui commented on GitHub (Oct 13, 2019):

Here is you quarterly reminder that the certificate auto renewal setup for api.modoboa.org is broken.

@Arvedui commented on GitHub (Oct 13, 2019): Here is you quarterly reminder that the certificate auto renewal setup for api.modoboa.org is broken.

kerem commented

2026-02-27 11:16:30 +03:00

Author

Owner

@tonioo commented on GitHub (Oct 13, 2019):

@Arvedui it's fixed and I hope it's the last time you report this ;)

@tonioo commented on GitHub (Oct 13, 2019): @Arvedui it's fixed and I hope it's the last time you report this ;)