Postal.karrot.world smpt tls certificate expired

Feedback and ideas Issues
1

Hi,

smtp tls certificate is expired 4 days ago. Not sure this is the right place to report it…

openssl s_client -connect postal.karrot.world:25  -starttls smtp

...
 0 s:CN = postal.karrot.world
   i:C = US, O = Let's Encrypt, CN = R11
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Feb  8 01:08:55 2025 GMT; NotAfter: May  9 01:08:54 2025 GMT
...

For information, @danveg, our email recovery karrot.foodsharing.lu does not work for this reason.

Thanks
Tigran

2

Thanks @tgr - sorry I missed this until now. It’s resolved now.

It’s odd, as it’s setup to do the appropriate service restart when the certificate is renewed, needs a bit more investigation.

Thanks for reporting it!

2 Likes
3

Ah, looks like the post_rotate hook feature had been commented out… I have a vague memory that was done because one of the hooks was failing, so I modified it so it should cope with the hook failing, and just continue…

I’m hoping that has resolved it now properly… :crossed_fingers:

1 Like
4

Thank you @nicksellen !

1 Like