Alerted on 2 labweb and a cloudweb-dev host
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | TheDJ | T283164 Let's Encrypt issuance chains update | |||
| Resolved | SLyngshede-WMF | T283165 OpenSSL < 1.1.0 compatibility issues with new LE issuance chain | |||
| Resolved | Reedy | T292342 Wikitech and wikitech-static out of sync |
Event Timeline
Comment Actions
[14:50:56] <icinga-wm> PROBLEM - Wikitech and wt-static content in sync on cloudweb2001-dev is CRITICAL: wikitech-static CRIT - wikitech and wikitech-static out of sync (219461s 200000s) https://wikitech.wikimedia.org/wiki/Wikitech-static
~60H
Comment Actions
From cron/syslog:
Oct 2 04:00:02 wikitech-static import-wikitech.sh[9981]: ERROR: The certificate of ‘wikitech.wikimedia.org’ is not trusted. Oct 2 04:00:02 wikitech-static import-wikitech.sh[9981]: ERROR: The certificate of ‘wikitech.wikimedia.org’ has expired.
Guessing more fallout from T283165: OpenSSL < 1.1.0 compatibility issues with new LE issuance chain/T283164: Let's Encrypt issuance chains update, and as such, should be good since I updated the packages earlier and the manual run didn't fail spectacularly!
root@wikitech-static:/wikitech-static/wikitechsync# cat /var/log/dpkg.log | grep ssl 2021-10-02 14:53:50 upgrade libssl1.0.2:amd64 1.0.2u-1~deb9u4 1.0.2u-1~deb9u6 2021-10-02 14:53:50 status half-configured libssl1.0.2:amd64 1.0.2u-1~deb9u4 2021-10-02 14:53:50 status unpacked libssl1.0.2:amd64 1.0.2u-1~deb9u4 2021-10-02 14:53:50 status half-installed libssl1.0.2:amd64 1.0.2u-1~deb9u4 2021-10-02 14:53:50 status half-installed libssl1.0.2:amd64 1.0.2u-1~deb9u4 2021-10-02 14:53:51 status unpacked libssl1.0.2:amd64 1.0.2u-1~deb9u6 2021-10-02 14:53:51 status unpacked libssl1.0.2:amd64 1.0.2u-1~deb9u6 2021-10-02 14:53:54 upgrade libgnutls-openssl27:amd64 3.5.8-5+deb9u5 3.5.8-5+deb9u6 2021-10-02 14:53:54 status half-configured libgnutls-openssl27:amd64 3.5.8-5+deb9u5 2021-10-02 14:53:54 status unpacked libgnutls-openssl27:amd64 3.5.8-5+deb9u5 2021-10-02 14:53:54 status half-installed libgnutls-openssl27:amd64 3.5.8-5+deb9u5 2021-10-02 14:53:54 status half-installed libgnutls-openssl27:amd64 3.5.8-5+deb9u5 2021-10-02 14:53:54 status unpacked libgnutls-openssl27:amd64 3.5.8-5+deb9u6 2021-10-02 14:53:54 status unpacked libgnutls-openssl27:amd64 3.5.8-5+deb9u6 2021-10-02 14:55:06 configure libssl1.0.2:amd64 1.0.2u-1~deb9u6 <none> 2021-10-02 14:55:06 status unpacked libssl1.0.2:amd64 1.0.2u-1~deb9u6 2021-10-02 14:55:06 status half-configured libssl1.0.2:amd64 1.0.2u-1~deb9u6 2021-10-02 14:55:06 status installed libssl1.0.2:amd64 1.0.2u-1~deb9u6 2021-10-02 14:55:44 configure libgnutls-openssl27:amd64 3.5.8-5+deb9u6 <none> 2021-10-02 14:55:44 status unpacked libgnutls-openssl27:amd64 3.5.8-5+deb9u6 2021-10-02 14:55:44 status half-configured libgnutls-openssl27:amd64 3.5.8-5+deb9u6 2021-10-02 14:55:44 status installed libgnutls-openssl27:amd64 3.5.8-5+deb9u6