Lets Encrypt expired

Just a quick heads-up for users of the Lets Encrypt app. At least those who have deployed it before May or have followed Mini-Howto: Kopano IMAP & Let's Encrypt

We had 2 reports today that the certificate has expired. According to /var/log/univention/letsencrypt.log the automatic renewal was successfully executed on Aug 1st. A quick look into the /etc/univention/letsencrypt.log showed that former versions created a chained.pem while the new app now provides the certificate as signed_chain.crt.
As all certificate-settings are configured by using the corresponding UCR-varables I’d recommend to check them and adjust the values if needed.

hth,
Dirk Ahrnke

2 Likes
Mastodon