Issue with updating LE certificates by Tigase XMPP Server (#1)
Andrzej Wójcik (Tigase) opened 8 months ago

LetsEncrypt certificates are accepted by Tigase XMPP Server and cron jobs are running without any errors, however, certificates within Tigase XMPP Server storage are not being updated.

Andrzej Wójcik (Tigase) commented 8 months ago

This issue was partially fixed by commit c532f16f

In this commit checking of a response from REST API was fixed to not report false positives making failed updates being reported as successful.

Additionally, cron job was allowed to work even if some certificates are missing (ie. not generated yet), while other certificates could be regenerated and required refresh in Tigase XMPP Server.

Moreover, due to bug in CertManager it is now required to not set preferred chain as it may return LE chaing with cross-signed certificates that are not supported by Tigase XMPP Server. This bug was introduced by recent changes done by LE on 8th of February, see https://community.letsencrypt.org/t/cert-manager-le-giving-unwanted-dst-x3-chain-after-feb-8/213476/6 for more details.

Andrzej Wójcik (Tigase) changed state to 'In Progress' 8 months ago
Previous Value Current Value
Open
In Progress
Andrzej Wójcik (Tigase) changed state to 'In QA' 8 months ago
Previous Value Current Value
In Progress
In QA
wojciech.kapcia@tigase.net moved 5 months ago
Previous Value Current Value
Attic/helm-charts
tigase/helm-charts
Referenced from commit 5 months ago
Referenced from commit 5 days ago
Referenced from commit 5 days ago
issue 1 of 1
Type
Bug
Priority
Normal
Assignee
Version
none
Target Release
1.1
Sprints
n/a
Customer
n/a
Issue Votes (0)
Watchers (3)
Reference
tigase/helm-charts#1
Please wait...
Page is in error, reload to recover