| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||
|---|---|---|---|---|---|---|---|---|---|
| 0006430 | Spring engine | General | public | 2020-12-19 08:14 | 2020-12-20 19:32 | ||||
| Reporter | esainane | ||||||||
| Assigned To | abma | ||||||||
| Priority | normal | Severity | minor | Reproducibility | N/A | ||||
| Status | resolved | Resolution | fixed | ||||||
| Product Version | |||||||||
| Target Version | Fixed in Version | ||||||||
| Summary | 0006430: mumble.springrts.com maintenance (Dec 2020) | ||||||||
| Description | The certificate for mumble.springrts.com has expired. Common Name: mumble.springrts.com Valid from: Wed Sep 9 20:09:43 2020 GMT Valid to: Tue Dec 8 20:09:43 2020 GMT Serial: 30333a36613a33653a66343a3265a63353a38343a32653a66643a61363a39383a30323a34643a36653a3923a34623a66353a3936 Public Key: 2048 bits RSA Digest (SHA-1): B0:72:F5:8D:B0:AD:1E:44:0F:5E:47:23:39:4B:0E:28:95:7B:41:75 Digest (SHA-256): EB:AF:61:67:69:B3:6F:DE:F8:BF:5C:99:3F:A8:4B:8B:2D:46:5A:EF:E9:E3:71:0D:79:74:7C:7F:B7:4C:7A:20 DNS: mumble.springrts.com | ||||||||
| Additional Information | Let's Encrypt certificates expire every three months. Until very recently, Mumble did not have a way to reload SSL certificates on the fly, but it looks like this functionality is now available in 1.3.0: https://github.com/mumble-voip/mumble/issues/1972 https://github.com/mumble-voip/mumble/pull/2850 I have a few scripts which I use to automatically renew certificates around acmetool, if you might be interested here. They were written to restart mumble rather than to reload, but changing the restart action to use SIGUSR1 would be trivial. | ||||||||
| Tags | No tags attached. | ||||||||
| Checked infolog.txt for Errors | Irrelevant | ||||||||
| Attached Files |
| ||||||||
 Relationships |
|
 Relationships |
| Notes |
|
|
abma (administrator) 2020-12-19 17:42 |
can you please test again? i've restarted the mumble-service: the certificate was up to date, but the service didn't reload the new cert it it seems. |
|
esainane (reporter) 2020-12-20 05:19 |
It's still using the same certificate, unfortunately. |
|
abma (administrator) 2020-12-20 19:32 |
oh, systemctl restart mumble-server.service didn't work! the service was not restarted. i changed the monthly auto restart to this: #!/bin/sh systemctl stop mumble-server.service sleep 1 killall -9 murmurd sleep 1 systemctl start mumble-server.service hopefully this is more robust :-) thanks for reporting! |
| Notes |
| Issue History |
|||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2020-12-19 08:14 | esainane | New Issue | |
| 2020-12-19 17:42 | abma | Assigned To | => abma |
| 2020-12-19 17:42 | abma | Status | new => feedback |
| 2020-12-19 17:42 | abma | Note Added: 0020546 | |
| 2020-12-20 05:19 | esainane | Note Added: 0020547 | |
| 2020-12-20 05:19 | esainane | Status | feedback => assigned |
| 2020-12-20 19:32 | abma | Status | assigned => resolved |
| 2020-12-20 19:32 | abma | Resolution | open => fixed |
| 2020-12-20 19:32 | abma | Note Added: 0020549 | |
| Issue History |