logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in  RSS Apache Lounge  


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.


Post new topic   Forum Index -> News & Hangout View previous topic :: View next topic
Reply to topic   Topic: [Urgent] Let's Encrypt revocations affecting TLS cert's
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2930
Location: Hilversum, NL, EU

PostPosted: Wed 26 Jan '22 10:31    Post subject: [Urgent] Let's Encrypt revocations affecting TLS cert's Reply with quote

Received the following mail :
Code:
Hello,

Please immediately renew your TLS certificate(s) that were issued from
Let's Encrypt using the TLS-ALPN-01 validation method and the following
ACME registration (account) ID(s):

xxxxxxxxx

We've determined that an error made it possible for TLS-ALPN-01
challenges, completed before today, to not comply with certificate
issuance requirements. We have remediated this problem and will revoke
all unexpired certificates that used this validation method at 16:00 UTC
on 28 January 2022. Please renew your certificates now to ensure an
uninterrupted experience for your site visitors.

We apologize for any inconvenience this may cause. If you need support
in the renewal process, please comment on our forum post. Our staff and
community members are available to help:

https://community.letsencrypt.org/t/170449

Thank you,

The Let's Encrypt Team

All certificates issued in the last 90 days and validated with TLS-ALPN-01 challenge are affected. You need to (force) renew the certificate according to your ACME client’s directions.

At https://community.letsencrypt.org/t/170449 in the comments is also the way how to renew with mod_md.

!! It is advised by us to renew all your Let's Encrypt certificates.

Let's Encrypt will revoke all unexpired certificates that used this validation method at 16:00 UTC on 28 January 2022. Renew your certificates now to ensure an uninterrupted experience for your site visitors.
Back to top
icing



Joined: 22 Sep 2015
Posts: 40
Location: Münster, Germany

PostPosted: Wed 26 Jan '22 15:31    Post subject: Reply with quote

Some info and advice on the Let's Encrypt trouble. Easy guide to check if your certificates are affected: https://github.com/icing/blog/blob/main/lets-encrypt-trouble.md
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7104
Location: Germany, Next to Hamburg

PostPosted: Fri 28 Jan '22 15:38    Post subject: Reply with quote

A quick check for a single domain

Code:

curl -X POST -d 'fqdn=example.com' https://tls-alpn-check.letsencrypt.org/checkhost
Back to top


Reply to topic   Topic: [Urgent] Let's Encrypt revocations affecting TLS cert's View previous topic :: View next topic
Post new topic   Forum Index -> News & Hangout