2021-06-13 04:06 CEST

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0006430Spring engineGeneralpublic2020-12-20 19:32
Reporteresainane 
Assigned Toabma 
PrioritynormalSeverityminorReproducibilityN/A
StatusresolvedResolutionfixed 
Product Version 
Target VersionFixed in Version 
Summary0006430: mumble.springrts.com maintenance (Dec 2020)
DescriptionThe certificate for mumble.springrts.com has expired.

Common Name: mumble.springrts.com
Valid from: Wed Sep 9 20:09:43 2020 GMT
Valid to: Tue Dec 8 20:09:43 2020 GMT
Serial: 30333a36613a33653a66343a3265a63353a38343a32653a66643a61363a39383a30323a34643a36653a3923a34623a66353a3936
Public Key: 2048 bits RSA
Digest (SHA-1): B0:72:F5:8D:B0:AD:1E:44:0F:5E:47:23:39:4B:0E:28:95:7B:41:75
Digest (SHA-256): EB:AF:61:67:69:B3:6F:DE:F8:BF:5C:99:3F:A8:4B:8B:2D:46:5A:EF:E9:E3:71:0D:79:74:7C:7F:B7:4C:7A:20
DNS: mumble.springrts.com
Additional InformationLet's Encrypt certificates expire every three months. Until very recently, Mumble did not have a way to reload SSL certificates on the fly, but it looks like this functionality is now available in 1.3.0: https://github.com/mumble-voip/mumble/issues/1972 https://github.com/mumble-voip/mumble/pull/2850

I have a few scripts which I use to automatically renew certificates around acmetool, if you might be interested here. They were written to restart mumble rather than to reload, but changing the restart action to use SIGUSR1 would be trivial.
TagsNo tags attached.
Checked infolog.txt for ErrorsIrrelevant
Attached Files

-Relationships
+Relationships

-Notes

~0020546

abma (administrator)

can you please test again?

i've restarted the mumble-service: the certificate was up to date, but the service didn't reload the new cert it it seems.

~0020547

esainane (reporter)

It's still using the same certificate, unfortunately.

~0020549

abma (administrator)

oh,

systemctl restart mumble-server.service didn't work! the service was not restarted.

i changed the monthly auto restart to this:


#!/bin/sh

systemctl stop mumble-server.service
sleep 1
killall -9 murmurd
sleep 1
systemctl start mumble-server.service


hopefully this is more robust :-)


thanks for reporting!
+Notes

-Issue History
Date Modified Username Field Change
2020-12-19 08:14 esainane New Issue
2020-12-19 17:42 abma Assigned To => abma
2020-12-19 17:42 abma Status new => feedback
2020-12-19 17:42 abma Note Added: 0020546
2020-12-20 05:19 esainane Note Added: 0020547
2020-12-20 05:19 esainane Status feedback => assigned
2020-12-20 19:32 abma Status assigned => resolved
2020-12-20 19:32 abma Resolution open => fixed
2020-12-20 19:32 abma Note Added: 0020549
+Issue History