Originally reported at wikiapiary@l.wm.o, LE certificate expired last week, and since HSTS is active, nobody can access the site until it is renewed.
Cronjob should be set up to renew it automatically in the future.
Originally reported at wikiapiary@l.wm.o, LE certificate expired last week, and since HSTS is active, nobody can access the site until it is renewed.
Cronjob should be set up to renew it automatically in the future.
Also mentioned here by @Samwilson Adding @MarkAHershberger since he is the one working with the server if I am not mistaken.
This is a known issue. This time we just have to sit tight.
@Ciencia_Al_Poder Since you are a regular user of WikiApiary it will be nice if you could subscribe to the mainlinglist. It is low traffic, so no worries.
See recent post to the Wikiapiary mailing list https://lists.wikimedia.org/pipermail/wikiapiary/2017-October/000012.html
We tried to update the SSL cert via letsencrypt today and ran into
trouble.Since this is the first time we have renewed a cert this way, we had
trouble understanding the commands.Anyway, we ended up blocking us from doing the renewal for about a week.
Which means the cert on the site will be broken for about a week.
See this post for an explanation:
https://community.letsencrypt.org/t/how-can-i-completely-reinstall-lets-encrypt-delete-all-old-certificates-and-start-fresh/10689/2Sorry for the trouble,
Mark.
Oops! I was already subscribed, but I tried to check/add a wiki from my work and I didn't check my personal email first, so I didn't see it
Yea, so the fix here is to just wait. I think there is not much else that can be done (besides buying a new cert just for these few days). Not sure what this means about "UBN" status. It is what it is.