Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: [Urgent] Let's Encrypt revocations affecting TLS cert's |
|
Author |
|
Steffen Moderator
Joined: 15 Oct 2005 Posts: 3092 Location: Hilversum, NL, EU
|
Posted: Wed 26 Jan '22 10:31 Post subject: [Urgent] Let's Encrypt revocations affecting TLS cert's |
|
|
Received the following mail :
Code: | Hello,
Please immediately renew your TLS certificate(s) that were issued from
Let's Encrypt using the TLS-ALPN-01 validation method and the following
ACME registration (account) ID(s):
xxxxxxxxx
We've determined that an error made it possible for TLS-ALPN-01
challenges, completed before today, to not comply with certificate
issuance requirements. We have remediated this problem and will revoke
all unexpired certificates that used this validation method at 16:00 UTC
on 28 January 2022. Please renew your certificates now to ensure an
uninterrupted experience for your site visitors.
We apologize for any inconvenience this may cause. If you need support
in the renewal process, please comment on our forum post. Our staff and
community members are available to help:
https://community.letsencrypt.org/t/170449
Thank you,
The Let's Encrypt Team |
All certificates issued in the last 90 days and validated with TLS-ALPN-01 challenge are affected. You need to (force) renew the certificate according to your ACME client’s directions.
At https://community.letsencrypt.org/t/170449 in the comments is also the way how to renew with mod_md.
!! It is advised by us to renew all your Let's Encrypt certificates.
Let's Encrypt will revoke all unexpired certificates that used this validation method at 16:00 UTC on 28 January 2022. Renew your certificates now to ensure an uninterrupted experience for your site visitors. |
|
Back to top |
|
icing
Joined: 22 Sep 2015 Posts: 41 Location: Münster, Germany
|
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7371 Location: Germany, Next to Hamburg
|
Posted: Fri 28 Jan '22 15:38 Post subject: |
|
|
A quick check for a single domain
Code: |
curl -X POST -d 'fqdn=example.com' https://tls-alpn-check.letsencrypt.org/checkhost
|
|
|
Back to top |
|
|
|
|
|
|