fedora-infrastructure

#11073 *.fedorapeople.org HTTPS certificate has expired
Closed: Fixed by smooge. Opened by ppisar.

Closed: Fixed
Reopen Issue

HTTPS connections to fedorapeople.org subdomains fails because of an expired server certificate:

$ gnutls-cli --port https ppisar.fedorapeople.org
Processed 361 CA certificate(s).
Resolving 'ppisar.fedorapeople.org:https'...
Connecting to '2600:2701:4000:5211:dead:beef:a7:9474:443'...
Connecting to '152.19.134.199:443'...
- Certificate type: X.509
- Got a certificate list of 3 certificates.
- Certificate[0] info:
 - subject `CN=*.fedorapeople.org', issuer `CN=R3,O=Let's Encrypt,C=US', serial 0x04e8a49d1195f8017deaf83705bac645169c, RSA key 4096 bits, signed using RSA-SHA256, activated `2022-10-07 14:19:33 UTC', expires `2023-01-05 14:19:32 UTC', pin-sha256="4amwBJblMuXM3nGs/wEKZsdWcaqUo7WuTrXbbA451A8="
        Public Key ID:
                sha1:0995e97acff644b84a50e410f4ad07e7298ff4e4
                sha256:e1a9b00496e532e5ccde71acff010a66c75671aa94a3b5ae4eb5db6c0e39d40f
        Public Key PIN:
                pin-sha256:4amwBJblMuXM3nGs/wEKZsdWcaqUo7WuTrXbbA451A8=
- Certificate[1] info:
 - subject `CN=R3,O=Let's Encrypt,C=US', issuer `CN=ISRG Root X1,O=Internet Security Research Group,C=US', serial 0x00912b084acf0c18a753f6d62e25a75f5a, RSA key 2048 bits, signed using RSA-SHA256, activated `2020-09-04 00:00:00 UTC', expires `2025-09-15 16:00:00 UTC', pin-sha256="jQJTbIh0grw0/1TkHSumWb+Fs0Ggogr621gT3PvPKG0="
- Certificate[2] info:
 - subject `CN=ISRG Root X1,O=Internet Security Research Group,C=US', issuer `CN=DST Root CA X3,O=Digital Signature Trust Co.', serial 0x4001772137d4e942b8ee76aa3c640ab7, RSA key 4096 bits, signed using RSA-SHA256, activated `2021-01-20 19:14:03 UTC', expires `2024-09-30 18:14:03 UTC', pin-sha256="C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHFr8M="
- Status: The certificate is NOT trusted. The certificate chain uses expired certificate. 
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.

just arrived here to report the same problem. The Fedora schedule is inaccessible because of this.

Metadata Update from @smooge:
- Issue assigned to smooge

Metadata Update from @smooge:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: dns, high-gain, medium-trouble, ops

Working through steps to fix this.

New letsencrypt certs have been created.
Keys were stored in ansible_private with new name
Configs were updated and fixed.
New certs were deployed and tested.

Metadata Update from @smooge:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Mostly fixed.. I forgot to add fedoraproject.org versus just the wildcard. Updating certs and pushing out.
Metadata

dns high-gain medium-trouble ops

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.